x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:10 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) [ 1001.437561][ T3597] XFS (loop2): Unmounting Filesystem 18:57:10 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 18:57:10 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0x80084121, &(0x7f0000000080)) 18:57:10 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'system.', ')\x00'}, 0x0, 0x0, 0x0) 18:57:10 executing program 3: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) 18:57:10 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) 18:57:10 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1002.383864][T21214] loop2: detected capacity change from 0 to 32768 [ 1002.413458][T21214] XFS (loop2): Mounting V5 Filesystem [ 1002.478981][T21214] XFS (loop2): Ending clean mount [ 1002.502872][T21214] XFS (loop2): Quotacheck needed: Please wait. [ 1002.561840][T21214] XFS (loop2): Quotacheck: Done. 18:57:11 executing program 5: symlinkat(&(0x7f0000000040)='./file1/file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00') r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x7600007e) 18:57:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0x80084121, &(0x7f0000000080)) 18:57:11 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@xdp, 0xffffffffffffff87, &(0x7f0000000100)=[{&(0x7f0000000080)="034ad60f76fbc5d1bd28215835277d14fc42ebb203f0ff0daf58a340f264cba3809dcefbc7e291c670d58c15c21c51a93ac8744ebfe8c94d49612a0d09938e12d464be7a86b8afa8fa523e95a1eaf544de27812af81fdfe4aef13437608b99fd0a419693377225b64dbef0910aa68fdb27930fd1adfd9a2f47487b", 0x7b}], 0x1, &(0x7f00000003c0)}, 0x0) 18:57:11 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:11 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x80c1, 0x18) execve(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 1002.650710][ T3597] XFS (loop2): Unmounting Filesystem 18:57:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') r1 = socket$packet(0x11, 0x2, 0x300) sendfile(r1, r0, 0x0, 0x3) 18:57:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) 18:57:11 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xa, 0x0}, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/98) 18:57:11 executing program 5: r0 = socket$inet(0x2, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 18:57:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0x80084121, &(0x7f0000000080)) 18:57:11 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:11 executing program 3: mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4c422, 0x0) 18:57:11 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0x80084121, &(0x7f0000000080)) 18:57:11 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_IOCTL(r0, 0x0, 0xfffffccb) 18:57:11 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:11 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x161, 0x0) 18:57:11 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) renameat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000001240)='./file0\x00') 18:57:12 executing program 2: mount$9p_rdma(&(0x7f0000000740), &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x41, 0x0) 18:57:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0x80084121, &(0x7f0000000080)) 18:57:12 executing program 3: symlinkat(&(0x7f0000000040)='./file1/file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x20a000, 0x0) 18:57:12 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:12 executing program 1: execve(&(0x7f0000000200)='\x00', 0x0, 0x0) 18:57:12 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x200) 18:57:12 executing program 1: mount$9p_rdma(0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 18:57:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0x80084121, &(0x7f0000000080)) 18:57:12 executing program 2: mount$9p_rdma(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x80d480, 0x0) 18:57:12 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x200000, 0x0) 18:57:12 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r0, 0x20000000) 18:57:12 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, 0x0, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'veth0_vlan\x00'}) syz_clone(0x20080000, &(0x7f0000000780)="f8be1dca5409c8ff0f0000c34a24892bf0c284ff5271dddd81db52034395e0f16ca6c8104a8de48cb9e98e09f702a486e5da3b60217a79d83fe15bbec8eef99a010084910c4322fb2d1a98a9e425a97c8c", 0x51, &(0x7f0000000480), &(0x7f0000000340), 0x0) socket$inet_udp(0x2, 0x2, 0x0) 18:57:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0x80084121, &(0x7f0000000080)) 18:57:12 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 18:57:12 executing program 2: utimensat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0) 18:57:12 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa43, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8c3, 0x0) 18:57:12 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, 0x0, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:12 executing program 5: symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') io_setup(0x0, &(0x7f0000000080)) 18:57:12 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000003780)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0x80084121, &(0x7f0000000080)) 18:57:12 executing program 3: timer_create(0x3, 0x0, &(0x7f00000005c0)) 18:57:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 18:57:12 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, 0x0, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/153, &(0x7f00000010c0)=0x99) 18:57:12 executing program 2: mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1000044, 0x0) 18:57:12 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa43, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x10041, 0x0) 18:57:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0x80084121, &(0x7f0000000080)) 18:57:12 executing program 5: symlinkat(&(0x7f0000000040)='./file1/file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00') execve(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 18:57:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000001080)=[{{0x0, 0xffffffffffffff9f, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0, 0x0) 18:57:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) r2 = signalfd4(r1, &(0x7f0000000140), 0x8, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) pwrite64(r3, &(0x7f0000000080)='=', 0x1, 0x800b5eb) sendfile(r2, r3, 0x0, 0x1000000000006) fcntl$lock(r0, 0x5, &(0x7f0000000180)) 18:57:12 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0x80084121, &(0x7f0000000080)) 18:57:13 executing program 5: syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x201000a, &(0x7f0000000200), 0x0, 0x0, 0x0) 18:57:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x6000, 0x0) 18:57:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') sendfile(r1, r4, 0x0, 0x3) 18:57:13 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0x80084121, &(0x7f0000000080)) [ 1004.418941][T21327] fuse: Bad value for 'fd' 18:57:13 executing program 5: symlinkat(&(0x7f0000000040)='./file1/file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00') r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file1\x00', 0x20000008) 18:57:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') sendfile(r1, r4, 0x0, 0x3) 18:57:13 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') sendfile(r1, r4, 0x0, 0x3) 18:57:13 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x163042, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x0, r2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 18:57:13 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:13 executing program 5: execve(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000002c0)=[&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)=',\xdf\x00', &(0x7f0000000340)='Yj,\xff\x8eq\x8d\x91\x9f\x87\x00\x04\x956\xf3\x1e\xd0`(\xba\xe4\x8agg\xf2\x99\x9d', &(0x7f0000000180)='.[-%}\x00', &(0x7f00000001c0)=')}&\x00', &(0x7f0000000200)='#+\x00\xea9\xe8\x05_)h\xc5vT\xdd\xe7tSd\xba\x84/#pL\xe5\xca\x11\xc6U\a\xa7m\x14 ElQ|\xf1]\xc4', &(0x7f0000000240)='127.0.0.1\x00', &(0x7f0000000280)='127.0.0.1\x00'], &(0x7f0000000380)=[&(0x7f0000000300)='/^\xb5(,([[+,\'@[\x00']) 18:57:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0x80084121, &(0x7f0000000080)) 18:57:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') sendfile(r1, r4, 0x0, 0x3) 18:57:13 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000003280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80043, 0x0) 18:57:13 executing program 5: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:13 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0x80084121, 0x0) 18:57:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r0, r2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') sendfile(r1, r4, 0x0, 0x3) 18:57:14 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840), 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:14 executing program 1: syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x8, &(0x7f0000000180)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x4}]}}) 18:57:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0x80084121, 0x0) [ 1005.413710][T21364] sch_fq: defrate 6 ignored. [ 1005.453550][T21357] loop5: detected capacity change from 0 to 16 [ 1005.519147][T21357] erofs: (device loop5): mounted with root inode @ nid 36. [ 1005.563676][T21357] syz-executor.5: attempt to access beyond end of device [ 1005.563676][T21357] loop5: rw=0, sector=1049256, nr_sectors = 8 limit=16 [ 1005.803409][ T3668] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1006.043643][ T3668] usb 2-1: Using ep0 maxpacket: 16 18:57:14 executing program 3: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:14 executing program 2: socketpair(0x6, 0x0, 0x0, &(0x7f0000000100)) [ 1006.077826][ T27] audit: type=1326 audit(1699642634.757:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21352 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47a447cae9 code=0x7fc00000 18:57:14 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0x80084121, 0x0) 18:57:14 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840), 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:14 executing program 5: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1006.110374][ T27] audit: type=1326 audit(1699642634.757:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21352 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47a447cae9 code=0x7fc00000 18:57:14 executing program 4: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:14 executing program 2: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="2321202e2f66696c653020290a71bbf69c82b296fdff5b0da351f1ec10a2d0acef45c4571087e4a3d582c66b8b1787eec7f89eb102000000fd8e0161c5d907bf0b4fb9e3d59bb18e11f7f0870a0274e92baace448b24530ba2e95ddba8f6581aa61aa857e7f609c0458a237a4d51bafa1800fe1f6842745de7994c53e0c24dd8fc22d63acb42b0bef3e6d8c2acdd8e39c43e88d1f268350d0881e994fb72007b7dc6bf4dccb2b338a224cf075f0788a8f2a20dde5fe95cdf2ef912a83c48c77bd5d341ddc9b3963b781eb9503b95aa9173a3fbb06c0e26000000000000000000000000010054ab886a90983b1dd676be6206719b52c58206a1603b9ea725b1af1e9caa97f54b8ec635180e8bde4f76c03ca6754fab658cc5be1d00d2659aa275ef4ce85741bfb915fc5fb20dac66f74a1029ab96c5e03f95dfcc6d9c299d77ed61ed90ac8468bb4b72796183710f4e8b2b388f3b39a77ac84a1758d67779689489063e89de922f5bd0f4322b37128281411b6a115c3cd07467b4fd604cbe1a304f28ef045065ab5f89a9583b3e07c300"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:14 executing program 2: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:14 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840), 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1006.263844][ T3668] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1006.273102][ T3668] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1006.293988][ T3668] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1006.342238][T21385] sch_fq: defrate 6 ignored. [ 1006.362107][T21391] sch_fq: defrate 6 ignored. [ 1006.362721][T21379] loop3: detected capacity change from 0 to 16 18:57:15 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1006.397745][T21379] erofs: (device loop3): mounted with root inode @ nid 36. [ 1006.416409][T21379] syz-executor.3: attempt to access beyond end of device [ 1006.416409][T21379] loop3: rw=0, sector=1049256, nr_sectors = 8 limit=16 [ 1006.433087][T21384] loop4: detected capacity change from 0 to 16 [ 1006.453844][ T3668] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1006.462950][ T3668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.485383][T21384] erofs: (device loop4): mounted with root inode @ nid 36. [ 1006.493174][ T3668] usb 2-1: Product: syz [ 1006.504567][ T3668] usb 2-1: Manufacturer: syz [ 1006.509754][ T3668] usb 2-1: SerialNumber: syz [ 1006.525503][T21384] syz-executor.4: attempt to access beyond end of device [ 1006.525503][T21384] loop4: rw=0, sector=1049256, nr_sectors = 8 limit=16 [ 1006.843554][ T3668] usb 2-1: 0:2 : does not exist [ 1006.855512][ T3668] usb 2-1: USB disconnect, device number 13 [ 1006.881598][T19200] udevd[19200]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 18:57:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @generic, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x22) 18:57:15 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:15 executing program 2: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:15 executing program 5: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:15 executing program 3: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$eJzsmT+rE0EUxc/M7kueDxFsLGwsfGBEs9ndqKRJEcFSEBJRy2DWEN0kkqyQBCyCjY2lhWDrF7CwSGVhZ2erhQqChSnthJGZHXfH/CPRZuHdH2T2zMydOzOX5BRZEARxZPn65efnZ1crjYsAjuMQeT3+3UpjuBH/6cWjC8+r116+/vjqXe/E49liPgZAiO33l7nf1ixEui/E36sP9bMBnuib4Div9S0wOLH8JUS6OgDDHR1z39D9Y1qEgXO3H7budcLAlY0nG182ZXN/G8B8ytACsK/Px4z54XjyoBmGwWBR7Ik/+yxN7So21U+dr8ZRNeona3r76ZOp7OvawDXq54HD07oMhrrWFeThOE5aEuP+p+00v7XN/bMgThYzcQwS2RJscUT+oJORU/PZ++VV37Jy+H8QyrgALE19OAjD6/+ROadNYGVM6k/MBs4Z/mTDTvyjFHUflobjSbHTbbaDdtDz/fIV95LrXvZLyojidoP/7St/OjDy762JzbEcRs0oGngjIBp4Sd+PW8Nx62/6P9QarvyPo3A2ziG/Kura+dV7MP3h6ilVwVp7eIIgCIIgCIIgCIIgCIIgiJ04A4b4TZhg+g/RVfg3VPTvAAAA//9xvG92") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:15 executing program 4: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$eJzsmT+rE0EUxc/M7kueDxFsLGwsfGBEs9ndqKRJEcFSEBJRy2DWEN0kkqyQBCyCjY2lhWDrF7CwSGVhZ2erhQqChSnthJGZHXfH/CPRZuHdH2T2zMydOzOX5BRZEARxZPn65efnZ1crjYsAjuMQeT3+3UpjuBH/6cWjC8+r116+/vjqXe/E49liPgZAiO33l7nf1ixEui/E36sP9bMBnuib4Div9S0wOLH8JUS6OgDDHR1z39D9Y1qEgXO3H7budcLAlY0nG182ZXN/G8B8ytACsK/Px4z54XjyoBmGwWBR7Ik/+yxN7So21U+dr8ZRNeona3r76ZOp7OvawDXq54HD07oMhrrWFeThOE5aEuP+p+00v7XN/bMgThYzcQwS2RJscUT+oJORU/PZ++VV37Jy+H8QyrgALE19OAjD6/+ROadNYGVM6k/MBs4Z/mTDTvyjFHUflobjSbHTbbaDdtDz/fIV95LrXvZLyojidoP/7St/OjDy762JzbEcRs0oGngjIBp4Sd+PW8Nx62/6P9QarvyPo3A2ziG/Kura+dV7MP3h6ilVwVp7eIIgCIIgCIIgCIIgCIIgiJ04A4b4TZhg+g/RVfg3VPTvAAAA//9xvG92") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:16 executing program 2: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200087e8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78050a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e756d44ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:57:16 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:16 executing program 5: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$eJzsmT+rE0EUxc/M7kueDxFsLGwsfGBEs9ndqKRJEcFSEBJRy2DWEN0kkqyQBCyCjY2lhWDrF7CwSGVhZ2erhQqChSnthJGZHXfH/CPRZuHdH2T2zMydOzOX5BRZEARxZPn65efnZ1crjYsAjuMQeT3+3UpjuBH/6cWjC8+r116+/vjqXe/E49liPgZAiO33l7nf1ixEui/E36sP9bMBnuib4Div9S0wOLH8JUS6OgDDHR1z39D9Y1qEgXO3H7budcLAlY0nG182ZXN/G8B8ytACsK/Px4z54XjyoBmGwWBR7Ik/+yxN7So21U+dr8ZRNeona3r76ZOp7OvawDXq54HD07oMhrrWFeThOE5aEuP+p+00v7XN/bMgThYzcQwS2RJscUT+oJORU/PZ++VV37Jy+H8QyrgALE19OAjD6/+ROadNYGVM6k/MBs4Z/mTDTvyjFHUflobjSbHTbbaDdtDz/fIV95LrXvZLyojidoP/7St/OjDy762JzbEcRs0oGngjIBp4Sd+PW8Nx62/6P9QarvyPo3A2ziG/Kura+dV7MP3h6ilVwVp7eIIgCIIgCIIgCIIgCIIgiJ04A4b4TZhg+g/RVfg3VPTvAAAA//9xvG92") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:16 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000640)={0x0, 0x0, 0xb, &(0x7f00000000c0)={0x5, 0xf, 0xb, 0x2, [@generic={0x3}, @generic={0x3, 0x10, 0xa}]}, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x2, &(0x7f00000004c0)=@string={0x2}}]}) 18:57:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000100)) 18:57:16 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1007.774144][T15187] usb 2-1: new high-speed USB device number 14 using dummy_hcd 18:57:16 executing program 3: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="2321202e2f66696c653020290a71bbf69c82b296fdff5b0da351f1ec10a2d0acef45c4571087e4a3d582c66b8b1787eec7f89eb102000000fd8e0161c5d907bf0b4fb9e3d59bb18e11f7f0870a0274e92baace448b24530ba2e95ddba8f6581aa61aa857e7f609c0458a237a4d51bafa1800fe1f6842745de7994c53e0c24dd8fc22d63acb42b0bef3e6d8c2acdd8e39c43e88d1f268350d0881e994fb72007b7dc6bf4dccb2b338a224cf075f0788a8f2a20dde5fe95cdf2ef912a83c48c77bd5d341ddc9b3963b781eb9503b95aa9173a3fbb06c0e26000000000000000000000000010054ab886a90983b1dd676be6206719b52c58206a1603b9ea725b1af1e9caa97f54b8ec635180e8bde4f76c03ca6754fab658cc5be1d00d2659aa275ef4ce85741bfb915fc5fb20dac66f74a1029ab96c5e03f95dfcc6d9c299d77ed61ed90ac8468bb4b72796183710f4e8b2b388f3b39a77ac84a1758d67779689489063e89de922f5bd0f4322b37128281411b6a115c3cd07467b4fd604cbe1a304f28ef045065ab5f89a9583b3e07c300"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1008.124252][T15187] usb 2-1: Using ep0 maxpacket: 32 18:57:16 executing program 4: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) write$binfmt_script(r6, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/411], 0xf3) poll(&(0x7f0000000040)=[{r6, 0x80}, {}], 0x2, 0x800) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x7, 0x4}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000002240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x840}}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x463, [{0x6, 0x1, 0x9}]}, @datasec={0xb, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x856, 0x5}, {0x5, 0x3, 0x7fffffff}, {0x5, 0x9, 0xfb}], '\"\n'}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x61, 0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000001500)=""/85, 0x9b, 0x55, 0x1, 0x800000}, 0x20) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x3, &(0x7f0000001300)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000001340)='GPL\x00', 0x2, 0xe1, &(0x7f0000001380)=""/225, 0x41100, 0x4, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000015c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001600)={0x2, 0x1, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r4, r4, r11, r4]}, 0x80) shutdown(r6, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001700)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000640)={r12, 0x9, 0x0, [0x10001, 0x77a6, 0x401, 0x400], [0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffa, 0x9166, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0xd9, 0x8, 0x0, 0x0, 0x0, 0x1ffffffffffffff, 0x0, 0x7, 0x100000001, 0x3, 0x0, 0x8000, 0x400, 0x5, 0x0, 0x5e, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0xe2, 0x4, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0xa0, 0x1000000000, 0x14, 0x5, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x10000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xb062, 0x10001, 0x0, 0x0, 0x10, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x3, 0x0, 0xfffffffffffffffe, 0x5, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x6, 0x9]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r5, 0x6, @inherit={0x58, 0x0}, @devid=r12}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000840)={r12, 0x3, 0x1, [0x81, 0x4, 0xdde, 0x8, 0x1], [0x2, 0x3949, 0x2, 0xfffffffffffffffa, 0x10000, 0x3, 0x4, 0x4, 0x6, 0x9, 0x7ff, 0x8, 0x314, 0x8001, 0xfff, 0x53a, 0x7, 0x5, 0x40000, 0x101, 0x7f, 0x4, 0x7, 0x0, 0x40, 0x8, 0x2a, 0x0, 0x2, 0x6, 0x42, 0x408, 0x8824, 0xfffffffffffffeff, 0x10001, 0x8, 0x8000, 0x7, 0xef36, 0x1, 0x100000001, 0x5, 0x7fffffffffffffff, 0x1000, 0x5, 0x6, 0x0, 0x5d6, 0x2, 0x2, 0x9, 0x40, 0x10000, 0x200, 0x8, 0x0, 0x5, 0x53d9, 0x6, 0xfffffffffffffff9, 0x409f, 0x4, 0xffffffffffffffff, 0x40, 0x8, 0x7fffffffffffffff, 0x6, 0x4, 0x480000, 0x1e, 0x6, 0x7, 0xd5ae, 0x1ac, 0x1, 0x8, 0x4, 0x8, 0x3, 0x800, 0x1, 0x0, 0x9, 0x4, 0x3, 0x9, 0x6, 0x400, 0x4, 0x8, 0xff, 0x800, 0x7fffffffffffffff, 0x6, 0xd8, 0x3e, 0x40000000000000, 0xe7f, 0x7, 0x4012, 0x1, 0x6, 0x0, 0xde6c, 0x6, 0x0, 0x6, 0x7fffffffffffffff, 0x1, 0x3d, 0xfffffffffffff0a4, 0x3, 0x6f, 0x1, 0x6, 0x9, 0x8, 0xff, 0x3f, 0x2, 0x200]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESOCT, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES8, @ANYRES32], 0x2, 0x1d4, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:17 executing program 2: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200087e8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78050a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e756d44ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 1008.374142][T15187] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1008.474387][T15187] usb 2-1: language id specifier not provided by device, defaulting to English [ 1008.654583][T15187] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1008.858195][T15187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.147440][T15187] usb 2-1: Product: syz 18:57:18 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x4140aecd, &(0x7f0000000180)) [ 1009.325092][T15187] usb 2-1: SerialNumber: syz 18:57:18 executing program 2: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200087e8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78050a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e756d44ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:57:18 executing program 4: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x2, &(0x7f00000004c0)=@string={0x2}}]}) 18:57:18 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') [ 1009.784977][T14462] usb 2-1: USB disconnect, device number 14 18:57:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae91, &(0x7f0000000200)) 18:57:19 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000640)={0x0, 0x0, 0xb, &(0x7f00000000c0)={0x5, 0xf, 0xb, 0x2, [@generic={0x3}, @generic={0x3, 0x10, 0xa}]}, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x2, &(0x7f00000004c0)=@string={0x2}}]}) 18:57:19 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000100)) r3 = dup2(r1, r2) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000180)) 18:57:19 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1010.450939][ T7817] usb 5-1: new high-speed USB device number 16 using dummy_hcd 18:57:19 executing program 2: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x78, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200087e8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78050a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e756d44ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 18:57:19 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000900)={0x0, 0x0, 0x16, {0x16, 0x0, "be34314c408d3a9a01c065607fad0bdbbc1a36d4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1010.693590][ T7817] usb 5-1: Using ep0 maxpacket: 32 [ 1010.843749][T14462] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1011.143423][T14462] usb 2-1: Using ep0 maxpacket: 32 18:57:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x2, 0x2, 0x0, @sint}]}) [ 1011.384155][T15187] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1011.394652][T14462] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 18:57:20 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1011.603911][ T7817] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1011.624048][T14462] usb 2-1: language id specifier not provided by device, defaulting to English [ 1011.663613][ T7817] usb 5-1: language id specifier not provided by device, defaulting to English [ 1011.753610][T14462] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1011.763161][T14462] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.771307][T14462] usb 2-1: Product: syz [ 1011.775752][T14462] usb 2-1: SerialNumber: syz [ 1011.793717][ T7817] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1011.809948][ T7817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.819880][ T7817] usb 5-1: Product: syz [ 1011.824823][ T7817] usb 5-1: SerialNumber: syz [ 1011.983525][T15187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.994793][T15187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.004828][T15187] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1012.014752][T15187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.029516][T15187] usb 6-1: config 0 descriptor?? [ 1012.041974][ T7817] usb 2-1: USB disconnect, device number 15 [ 1012.066449][T14462] usb 5-1: USB disconnect, device number 16 18:57:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{}, {0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x5}]}, 0x10) ioctl$KVM_SET_CPUID(r2, 0x4040aea0, &(0x7f0000000180)=ANY=[]) 18:57:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f00000002c0), 0x1c) 18:57:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000180)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 18:57:21 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1012.525780][T15187] lua 0003:1E7D:2C2E.0003: item fetching failed at offset 4/5 [ 1012.546095][T15187] lua 0003:1E7D:2C2E.0003: parse failed [ 1012.551695][T15187] lua: probe of 0003:1E7D:2C2E.0003 failed with error -22 18:57:21 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000640)={0x0, 0x0, 0xb, &(0x7f00000000c0)={0x5, 0xf, 0xb, 0x2, [@generic={0x3}, @generic={0x3, 0x10, 0xa}]}, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x2, &(0x7f00000004c0)=@string={0x2}}]}) 18:57:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x890d, 0x0) 18:57:21 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}) [ 1012.727442][T15187] usb 6-1: USB disconnect, device number 17 18:57:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000001c0)={'geneve1\x00', @ifru_flags}) [ 1012.953703][ T3668] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1013.193558][ T3668] usb 2-1: Using ep0 maxpacket: 32 18:57:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000900)={0x0, 0x0, 0x16, {0x16, 0x0, "be34314c408d3a9a01c065607fad0bdbbc1a36d4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:57:21 executing program 4: socketpair(0xa, 0x3, 0x3a, &(0x7f0000000000)) 18:57:21 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:21 executing program 2: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r0, 0x0, 0x0) 18:57:21 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000640)=@hci={0x1f, 0x0, 0x2}, 0x80) 18:57:22 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000900)={0x0, 0x0, 0x16, {0x16, 0x0, "be34314c408d3a9a01c065607fad0bdbbc1a36d4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:57:22 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1013.403580][ T3668] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1013.503693][ T3668] usb 2-1: language id specifier not provided by device, defaulting to English [ 1013.623637][ T3668] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1013.632838][ T3668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.641023][T15187] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1013.655049][ T3668] usb 2-1: Product: syz [ 1013.661114][ T3668] usb 2-1: SerialNumber: syz [ 1013.726664][ T3642] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1013.933935][T14462] usb 2-1: USB disconnect, device number 16 [ 1014.043628][T15187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.063350][T15187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.083361][T15187] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1014.092533][T15187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.093700][ T3642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.121899][T15187] usb 6-1: config 0 descriptor?? [ 1014.134268][ T3642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.149275][ T3642] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1014.161020][ T3642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.175900][ T3642] usb 5-1: config 0 descriptor?? 18:57:23 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000640)={0x0, 0x0, 0xb, &(0x7f00000000c0)={0x5, 0xf, 0xb, 0x2, [@generic={0x3}, @generic={0x3, 0x10, 0xa}]}, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x2, &(0x7f00000004c0)=@string={0x2}}]}) 18:57:23 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:23 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x80800, 0x0) 18:57:23 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) 18:57:23 executing program 3: socket$can_j1939(0x1d, 0x2, 0x7) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) [ 1014.617681][T15187] lua 0003:1E7D:2C2E.0004: item fetching failed at offset 4/5 [ 1014.627542][T15187] lua 0003:1E7D:2C2E.0004: parse failed [ 1014.633169][T15187] lua: probe of 0003:1E7D:2C2E.0004 failed with error -22 [ 1014.670285][ T3642] lua 0003:1E7D:2C2E.0005: item fetching failed at offset 4/5 [ 1014.678944][ T3642] lua 0003:1E7D:2C2E.0005: parse failed [ 1014.707591][ T3642] lua: probe of 0003:1E7D:2C2E.0005 failed with error -22 [ 1014.822318][ T26] usb 6-1: USB disconnect, device number 18 [ 1014.873742][ T3642] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1014.881887][ T3668] usb 5-1: USB disconnect, device number 17 [ 1015.113391][ T3642] usb 2-1: Using ep0 maxpacket: 32 18:57:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000900)={0x0, 0x0, 0x16, {0x16, 0x0, "be34314c408d3a9a01c065607fad0bdbbc1a36d4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:57:24 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x40) 18:57:24 executing program 2: syz_genetlink_get_family_id$smc(&(0x7f0000000840), 0xffffffffffffffff) [ 1015.313619][ T3642] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 18:57:24 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000900)={0x0, 0x0, 0x16, {0x16, 0x0, "be34314c408d3a9a01c065607fad0bdbbc1a36d4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 1015.364640][ T3642] usb 2-1: language id specifier not provided by device, defaulting to English 18:57:24 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:24 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4800, 0x8) [ 1015.524314][ T3642] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1015.545189][ T3642] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.574889][ T3642] usb 2-1: Product: syz [ 1015.587904][ T3642] usb 2-1: SerialNumber: syz [ 1015.753432][T14462] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1015.773452][T15187] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1015.842294][ T3642] usb 2-1: USB disconnect, device number 17 [ 1016.133684][T14462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.145074][T14462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.156162][T15187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.167146][T14462] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1016.176261][T15187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.186164][T14462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.194294][T15187] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1016.204772][T15187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.214559][T14462] usb 6-1: config 0 descriptor?? [ 1016.222582][T15187] usb 5-1: config 0 descriptor?? 18:57:25 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xa02, 0x0) write$tun(r0, 0x0, 0xfffffe0a) 18:57:25 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 18:57:25 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:25 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="add1925e4fb6343b08ded7f23e6cb433eb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1d0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CSA_IES={0x1b4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x8d, 0xe, {@with_ht, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @void, @void, [{0xdd, 0x31, "0dfb8399fea7cbb2c2d301fb7486b7863f0d068f103444ac80215d5a457920bfb2175bdd5f821d39be09994dd51631a0d0"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x120, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xed, 0x2, "d71ba70d2d16ab122f9fea575004d5d4a198050ebd71740f0432a698515d5c06c871a61c08bb3d937ac30b7306e7b4743050879c31d49f524175e2d153f306b569a8bc7258bd59651ea7fbbe9c36f4301484c358f418cee3d5f71f72e8592bcdd836519033662212ac1c8c61d345b85e5020414ef4cbe57d966228e8669cccbbe7b001f4f906a97b29ca1f04090f846384178b1ec9bc065bb2ad868e0eb299f9d89179b423dcde630950a7f2c7f35e189c41fc30349ef0aca71ae03afd84ffa4f5f5bff4bead0f5e8bf7e81ee19598fa0ed5b5df4e8467aada9b4229980b054ccdaaba5acf0271e50b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x25, 0x3, "a1da9ad3f5d120c246fb5c1d086cda622304fc7bd04477017e2eb1532cb6cdce2f"}]}]]}]}, 0x1d0}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 18:57:25 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 1016.541678][ T27] audit: type=1804 audit(1699642645.217:122): pid=21545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2994197568/syzkaller.JGCGzE/1135/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 [ 1016.578942][ T27] audit: type=1804 audit(1699642645.217:123): pid=21545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2994197568/syzkaller.JGCGzE/1135/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 [ 1016.695586][T14462] lua 0003:1E7D:2C2E.0006: item fetching failed at offset 4/5 [ 1016.705195][T15187] lua 0003:1E7D:2C2E.0007: item fetching failed at offset 4/5 [ 1016.713093][T15187] lua 0003:1E7D:2C2E.0007: parse failed [ 1016.726864][T14462] lua 0003:1E7D:2C2E.0006: parse failed [ 1016.732719][T14462] lua: probe of 0003:1E7D:2C2E.0006 failed with error -22 [ 1016.740845][T15187] lua: probe of 0003:1E7D:2C2E.0007 failed with error -22 [ 1016.902992][T14462] usb 6-1: USB disconnect, device number 19 [ 1016.947382][ T3668] usb 5-1: USB disconnect, device number 18 18:57:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000900)={0x0, 0x0, 0x16, {0x16, 0x0, "be34314c408d3a9a01c065607fad0bdbbc1a36d4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:57:26 executing program 2: r0 = syz_clone(0x48001000, &(0x7f00000000c0)="3537cc701543714364b900837ce29d7f902015983f89e70a597e570e94ff9642dec2b412a38f8d9362eb3279e65303fea841425cea3b607e1407f3bdea294591e46a0b28b7346daa5023b2df2850958a6cf698a4c358c43e73c3f8f3b5ffc15ddbbb7bb9e97f2198f4a4a4af7e09e6e15d593f9e8c2d3c4039381dc8768d241ce07cb8b801e46b32301b8af61ae0eb99442c80cfb7d6f0efb88df76053043d0a545a8d7cb4caf1cac6f53e3fc45db33e82b97111e812e5d88f4dd2f494ba53fbf9a3fa7a3d18d9806460161aff96d84c59a9b1a8aa75b61f0000", 0xda, &(0x7f0000000000), &(0x7f0000001480), &(0x7f00000014c0)="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") syz_clone(0x31020200, &(0x7f0000001200)="ef1ecba440d629735178b1163395c242eedc432b2cb14e8da40f940dbdd0e6d0be02da85981e86e1050ff2395f54fdab7ead61510c429c91e7cdd76e4de04f8b5b7dfa5666211a7f8ee95be1ed3a0acda10a2c8625b166f0e9998e3ba060c0a999e0c101eb8de315c236ee2a19f4789083ad7f0bb5ba8249d16e13764d0621f9d10c1236fe5840d918c6347716efbcde3ce805ed3f5fc2deffee4919c032a9647eee5a78fce45bdbc40e22f086e2946b3468c6e545c09ab87d9c5e6bca0f1203ba", 0xc1, &(0x7f0000001300), &(0x7f0000001340), 0x0) io_pgetevents(0x0, 0x6cc, 0x2, &(0x7f0000000340)=[{}, {}], &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x6]}, 0x8}) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x34144, 0xc2) syz_open_dev$usbmon(&(0x7f0000000080), 0x80000000, 0x210701) sched_rr_get_interval(r0, &(0x7f0000001440)) syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/mnt\x00') 18:57:26 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:26 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 18:57:26 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000900)={0x0, 0x0, 0x16, {0x16, 0x0, "be34314c408d3a9a01c065607fad0bdbbc1a36d4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:57:26 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="add1925e4fb6343b08ded7f23e6cb433eb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1d0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CSA_IES={0x1b4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x8d, 0xe, {@with_ht, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @void, @void, [{0xdd, 0x31, "0dfb8399fea7cbb2c2d301fb7486b7863f0d068f103444ac80215d5a457920bfb2175bdd5f821d39be09994dd51631a0d0"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x120, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xed, 0x2, "d71ba70d2d16ab122f9fea575004d5d4a198050ebd71740f0432a698515d5c06c871a61c08bb3d937ac30b7306e7b4743050879c31d49f524175e2d153f306b569a8bc7258bd59651ea7fbbe9c36f4301484c358f418cee3d5f71f72e8592bcdd836519033662212ac1c8c61d345b85e5020414ef4cbe57d966228e8669cccbbe7b001f4f906a97b29ca1f04090f846384178b1ec9bc065bb2ad868e0eb299f9d89179b423dcde630950a7f2c7f35e189c41fc30349ef0aca71ae03afd84ffa4f5f5bff4bead0f5e8bf7e81ee19598fa0ed5b5df4e8467aada9b4229980b054ccdaaba5acf0271e50b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x25, 0x3, "a1da9ad3f5d120c246fb5c1d086cda622304fc7bd04477017e2eb1532cb6cdce2f"}]}]]}]}, 0x1d0}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 18:57:26 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 18:57:26 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=0xffffffffffffffff, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1017.652257][ T27] audit: type=1804 audit(1699642646.327:124): pid=21554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2994197568/syzkaller.JGCGzE/1136/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 18:57:26 executing program 3: clock_gettime(0x7, &(0x7f0000000040)) r0 = syz_clone(0x48001000, &(0x7f00000000c0), 0x0, &(0x7f0000000000), &(0x7f0000001480), &(0x7f00000014c0)="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") syz_clone(0x31020200, 0x0, 0x0, &(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)="c33e19ca879c7be19c960c3db631e7525bdf32da23da3e5f538f588b7fe35bc5b74b01d3bec3cde29637a7bde75ddf0b3378af95b6198b21b0920d163a54ee4e3fe1a8d6caca6df1c09348d0690ca4e90be3f9056b1b747f4e2b845797680dbaa55d963c745b2cb093f9bc993f57275fe1bfccc84eb52edd7eb7e64bdae942106322dcbdadc785d96e3f9af5c20c205032eb") io_pgetevents(0x0, 0x6cc, 0x2, &(0x7f0000000340)=[{}, {}], &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x6]}, 0x8}) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x34144, 0xc2) syz_open_dev$usbmon(&(0x7f0000000080), 0x80000000, 0x210701) sched_rr_get_interval(r0, &(0x7f0000001440)) syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/mnt\x00') [ 1017.690464][ T27] audit: type=1804 audit(1699642646.357:125): pid=21554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2994197568/syzkaller.JGCGzE/1136/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 18:57:26 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=0xffffffffffffffff, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:26 executing program 2: symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') [ 1017.843500][ T26] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1017.891233][ T3668] usb 6-1: new high-speed USB device number 20 using dummy_hcd 18:57:26 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=0xffffffffffffffff, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1018.213780][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.233425][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.243408][ T26] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1018.280503][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.295082][ T3668] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.301776][ T26] usb 5-1: config 0 descriptor?? [ 1018.319130][ T3668] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.340306][ T3668] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1018.363388][ T3668] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.390734][ T3668] usb 6-1: config 0 descriptor?? [ 1018.785787][ T26] lua 0003:1E7D:2C2E.0008: item fetching failed at offset 4/5 [ 1018.807498][ T26] lua 0003:1E7D:2C2E.0008: parse failed [ 1018.827301][ T26] lua: probe of 0003:1E7D:2C2E.0008 failed with error -22 [ 1018.877398][ T3668] lua 0003:1E7D:2C2E.0009: item fetching failed at offset 4/5 [ 1018.910191][ T3668] lua 0003:1E7D:2C2E.0009: parse failed [ 1018.915920][ T3668] lua: probe of 0003:1E7D:2C2E.0009 failed with error -22 [ 1018.995875][T17432] usb 5-1: USB disconnect, device number 19 [ 1019.135409][T15187] usb 6-1: USB disconnect, device number 20 18:57:28 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000600)=ANY=[@ANYBLOB="67727071756f74612c7379737667726f7570732c6572726f72733d72656d6f756e742d726f2c6d61785f62617463685f74696d653d3078303030303030303030303030303030332c646174613d6f7264657265642c696e69745f697461626c653d3078303030303030303030303030303030332c75737271756f74612c6d61785f6469725f73697a655f6b623d3078303030303030303030303030343064322c0091012b32a76cb02358"], 0x1, 0x5e9, &(0x7f0000001200)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e571) creat(&(0x7f0000000300)='./bus\x00', 0x0) 18:57:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x600, 0x0, 0x1, 0x1}, 0x20) 18:57:28 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="add1925e4fb6343b08ded7f23e6cb433eb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1d0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CSA_IES={0x1b4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x8d, 0xe, {@with_ht, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @void, @void, [{0xdd, 0x31, "0dfb8399fea7cbb2c2d301fb7486b7863f0d068f103444ac80215d5a457920bfb2175bdd5f821d39be09994dd51631a0d0"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x120, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xed, 0x2, "d71ba70d2d16ab122f9fea575004d5d4a198050ebd71740f0432a698515d5c06c871a61c08bb3d937ac30b7306e7b4743050879c31d49f524175e2d153f306b569a8bc7258bd59651ea7fbbe9c36f4301484c358f418cee3d5f71f72e8592bcdd836519033662212ac1c8c61d345b85e5020414ef4cbe57d966228e8669cccbbe7b001f4f906a97b29ca1f04090f846384178b1ec9bc065bb2ad868e0eb299f9d89179b423dcde630950a7f2c7f35e189c41fc30349ef0aca71ae03afd84ffa4f5f5bff4bead0f5e8bf7e81ee19598fa0ed5b5df4e8467aada9b4229980b054ccdaaba5acf0271e50b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x25, 0x3, "a1da9ad3f5d120c246fb5c1d086cda622304fc7bd04477017e2eb1532cb6cdce2f"}]}]]}]}, 0x1d0}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 18:57:28 executing program 4: clock_gettime(0x0, 0x0) syz_clone(0x48001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x31020200, 0x0, 0x0, 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000001440)) 18:57:28 executing program 5: syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x210701) 18:57:28 executing program 3: clock_gettime(0x0, &(0x7f0000000040)) r0 = syz_clone(0x48001000, &(0x7f00000000c0), 0x0, &(0x7f0000000000), 0x0, &(0x7f00000014c0)) syz_open_dev$usbmon(&(0x7f0000000080), 0x80000000, 0x0) sched_rr_get_interval(r0, 0x0) 18:57:28 executing program 5: r0 = socket(0x11, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8924, &(0x7f0000000240)={'batadv_slave_0\x00'}) [ 1019.741807][T21582] loop2: detected capacity change from 0 to 1024 18:57:28 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1019.837670][T21582] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1019.885276][ T27] audit: type=1804 audit(1699642648.567:126): pid=21585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2994197568/syzkaller.JGCGzE/1137/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 1019.928375][ T27] audit: type=1804 audit(1699642648.597:127): pid=21585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2994197568/syzkaller.JGCGzE/1137/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 18:57:28 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002440)={0x10}, 0x10) [ 1020.039178][ T27] audit: type=1800 audit(1699642648.637:128): pid=21582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 18:57:28 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:28 executing program 5: get_mempolicy(&(0x7f0000000280), 0x0, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2) 18:57:28 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 18:57:29 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000002180), 0xc922c750a728a2a5, 0x0) 18:57:29 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = dup2(r0, r0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) [ 1020.516419][ T3597] EXT4-fs (loop2): unmounting filesystem. 18:57:29 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="add1925e4fb6343b08ded7f23e6cb433eb"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5ff000004000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1d0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @NL80211_ATTR_CSA_IES={0x1b4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x8d, 0xe, {@with_ht, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @void, @void, [{0xdd, 0x31, "0dfb8399fea7cbb2c2d301fb7486b7863f0d068f103444ac80215d5a457920bfb2175bdd5f821d39be09994dd51631a0d0"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x120, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xed, 0x2, "d71ba70d2d16ab122f9fea575004d5d4a198050ebd71740f0432a698515d5c06c871a61c08bb3d937ac30b7306e7b4743050879c31d49f524175e2d153f306b569a8bc7258bd59651ea7fbbe9c36f4301484c358f418cee3d5f71f72e8592bcdd836519033662212ac1c8c61d345b85e5020414ef4cbe57d966228e8669cccbbe7b001f4f906a97b29ca1f04090f846384178b1ec9bc065bb2ad868e0eb299f9d89179b423dcde630950a7f2c7f35e189c41fc30349ef0aca71ae03afd84ffa4f5f5bff4bead0f5e8bf7e81ee19598fa0ed5b5df4e8467aada9b4229980b054ccdaaba5acf0271e50b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x25, 0x3, "a1da9ad3f5d120c246fb5c1d086cda622304fc7bd04477017e2eb1532cb6cdce2f"}]}]]}]}, 0x1d0}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240)=ANY=[], 0x3af4701e) sendfile(r5, r4, 0x0, 0x10000a006) 18:57:29 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000600)=ANY=[@ANYBLOB="67727071756f74612c7379737667726f7570732c6572726f72733d72656d6f756e742d726f2c6d61785f62617463685f74696d653d3078303030303030303030303030303030332c646174613d6f7264657265642c696e69745f697461626c653d3078303030303030303030303030303030332c75737271756f74612c6d61785f6469725f73697a655f6b623d3078303030303030303030303030343064322c0091012b32a76cb02358"], 0x1, 0x5e9, &(0x7f0000001200)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e571) creat(&(0x7f0000000300)='./bus\x00', 0x0) 18:57:29 executing program 3: r0 = inotify_init() r1 = inotify_init() dup2(r0, r1) 18:57:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000600)=ANY=[@ANYBLOB="67727071756f74612c7379737667726f7570732c6572726f72733d72656d6f756e742d726f2c6d61785f62617463685f74696d653d3078303030303030303030303030303030332c646174613d6f7264657265642c696e69745f697461626c653d3078303030303030303030303030303030332c75737271756f74612c6d61785f6469725f73697a655f6b623d3078303030303030303030303030343064322c0091012b32a76cb02358"], 0x1, 0x5e9, &(0x7f0000001200)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e571) creat(&(0x7f0000000300)='./bus\x00', 0x0) 18:57:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 18:57:29 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@generic={0x0, 0x0, 0x18}, 0x18) [ 1020.732328][T21624] loop2: detected capacity change from 0 to 1024 [ 1020.758640][T21621] loop4: detected capacity change from 0 to 1024 [ 1020.803962][T21624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. 18:57:29 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x18}, 0x48) [ 1020.866754][ T27] audit: type=1800 audit(1699642649.547:129): pid=21624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1020.915283][T21621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. 18:57:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20}, 0x0) 18:57:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000600)=ANY=[@ANYBLOB="67727071756f74612c7379737667726f7570732c6572726f72733d72656d6f756e742d726f2c6d61785f62617463685f74696d653d3078303030303030303030303030303030332c646174613d6f7264657265642c696e69745f697461626c653d3078303030303030303030303030303030332c75737271756f74612c6d61785f6469725f73697a655f6b623d3078303030303030303030303030343064322c0091012b32a76cb02358"], 0x1, 0x5e9, &(0x7f0000001200)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e571) creat(&(0x7f0000000300)='./bus\x00', 0x0) 18:57:29 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1021.047328][ T3584] EXT4-fs (loop4): unmounting filesystem. [ 1021.065802][ T27] audit: type=1800 audit(1699642649.677:130): pid=21621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1021.274363][ T27] audit: type=1804 audit(1699642649.957:131): pid=21629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2994197568/syzkaller.JGCGzE/1138/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 [ 1021.337938][T21645] loop4: detected capacity change from 0 to 1024 [ 1021.360747][ T3597] EXT4-fs (loop2): unmounting filesystem. [ 1021.407659][T21645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. 18:57:30 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB, @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:30 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000180)) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000500)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) 18:57:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)='-', 0x1}, {&(0x7f0000000140)="7765d3e73fe1a061f2b69ac8ddc7aa11", 0x10}, {&(0x7f0000000380)="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", 0xeb1}], 0x3}, 0x5) 18:57:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000600)=ANY=[@ANYBLOB="67727071756f74612c7379737667726f7570732c6572726f72733d72656d6f756e742d726f2c6d61785f62617463685f74696d653d3078303030303030303030303030303030332c646174613d6f7264657265642c696e69745f697461626c653d3078303030303030303030303030303030332c75737271756f74612c6d61785f6469725f73697a655f6b623d3078303030303030303030303030343064322c0091012b32a76cb02358"], 0x1, 0x5e9, &(0x7f0000001200)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e571) creat(&(0x7f0000000300)='./bus\x00', 0x0) 18:57:30 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) 18:57:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000600)=ANY=[@ANYBLOB="67727071756f74612c7379737667726f7570732c6572726f72733d72656d6f756e742d726f2c6d61785f62617463685f74696d653d3078303030303030303030303030303030332c646174613d6f7264657265642c696e69745f697461626c653d3078303030303030303030303030303030332c75737271756f74612c6d61785f6469725f73697a655f6b623d3078303030303030303030303030343064322c0091012b32a76cb02358"], 0x1, 0x5e9, &(0x7f0000001200)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e571) creat(&(0x7f0000000300)='./bus\x00', 0x0) 18:57:30 executing program 5: syz_clone(0x1c104000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1021.784318][ T3584] EXT4-fs (loop4): unmounting filesystem. [ 1021.823406][T21653] loop2: detected capacity change from 0 to 1024 18:57:30 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB, @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) [ 1021.957221][T21653] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. 18:57:30 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB, @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1022.032742][T21659] loop4: detected capacity change from 0 to 1024 [ 1022.067033][ T27] kauditd_printk_skb: 2 callbacks suppressed 18:57:30 executing program 1: syz_clone(0x44041080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 18:57:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) [ 1022.067050][ T27] audit: type=1800 audit(1699642650.747:134): pid=21653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1022.102971][T21659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. 18:57:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x10}}], 0x28}, 0x0) [ 1022.274185][ T27] audit: type=1800 audit(1699642650.957:135): pid=21659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 18:57:31 executing program 5: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x10000}, 0x48) 18:57:31 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000600)=ANY=[@ANYBLOB="67727071756f74612c7379737667726f7570732c6572726f72733d72656d6f756e742d726f2c6d61785f62617463685f74696d653d3078303030303030303030303030303030332c646174613d6f7264657265642c696e69745f697461626c653d3078303030303030303030303030303030332c75737271756f74612c6d61785f6469725f73697a655f6b623d3078303030303030303030303030343064322c0091012b32a76cb02358"], 0x1, 0x5e9, &(0x7f0000001200)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x6db6e571) creat(&(0x7f0000000300)='./bus\x00', 0x0) 18:57:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001940)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000500)='6', 0x1}], 0x1}, 0x4000001) [ 1022.522069][ T3597] EXT4-fs (loop2): unmounting filesystem. 18:57:31 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 18:57:31 executing program 4: bpf$ITER_CREATE(0x10, 0x0, 0x0) 18:57:31 executing program 5: syz_clone(0x44041080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:31 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1022.702251][ T3584] EXT4-fs (loop4): unmounting filesystem. [ 1022.764664][T21690] loop2: detected capacity change from 0 to 1024 18:57:31 executing program 4: syz_clone(0xa01400, 0x0, 0x0, &(0x7f0000002600), 0x0, 0x0) [ 1022.828835][T21690] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1022.931162][ T27] audit: type=1800 audit(1699642651.607:136): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1023.003050][ T3597] EXT4-fs (loop2): unmounting filesystem. 18:57:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x30}, 0x0) 18:57:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x1) 18:57:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB="1000000000000000005afb4a950000000000000000e1"], 0x40}, 0x0) 18:57:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1}}}], 0x40}, 0x0) 18:57:31 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) 18:57:32 executing program 4: syz_clone(0x40100080, 0x0, 0x0, &(0x7f0000002300), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:32 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000500)="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", 0xec1}, {&(0x7f0000000200)='9', 0x1}], 0x2}, 0x0) 18:57:32 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 18:57:32 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x12, &(0x7f0000000480)=ANY=[@ANYRES32], &(0x7f00000000c0)='GPL\x00'}, 0x90) 18:57:32 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000300)=[{0x4}]}, 0x90) 18:57:32 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:32 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@base={0x1a, 0x0, 0x0, 0x0, 0x1104, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f0000000000)="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", &(0x7f0000000100)=""/124, &(0x7f0000000180)="40de41cdeaf6d3b4466443c3921298c9f96c3165ac8da53624ca7283318264fe1591fd94830e8fbe64bbb4ee84f81ce0f3a37abd081b7fee5491133d7e92d7060212781306704e8ff6e26a96aaf3b6155b97102be32b90b88997a1470126fc3b6a3ec76bb66c80ccfadac1fe8f8c1a7d740e0e456e1e040af4e43e45964a71d4f8bff09e71f306adcdf224e344cc487da7fdb10a3dd4b4748d6f44db6a9dd249baacf46a80703245d86f0cbfaa4b046c20236443dfc9d9419b5ea88595b7e269dda1e95dc7399a55bb9ea53dee098b6b301da71cd3397446dcb3af6da86ccd204c181ef8eb006691d48ce650ef55e3e34072dfe201f9f09d83", &(0x7f0000000280)="90d2497cf9d4bf1e97efa9a1488acefd8bde54f908860b7205eae02e6e26bcbbdab0bdc029c69e36b08d90ecaf4a9a0cc09c84320eb70ed02c0301b9e8b7089737218de070efc26b54ff49e04f0278e22dad4c467b8892a6ad0bebe02869e074d487fb0a5a7659bd74b1ccdb981d7617c416dcf7f9e884997b0f4db0154f0b1c3cceae291be3868ce49029a8e34f52f292d242e306582828446d63fa72424af9f324ced1b987fd35cb0129efd48cdd46ec7c29a7983e96b088a3b458a2abeda5d1f2d7ab4eec4a5a2a9d1e1dd8", 0x546, r0, 0x4}, 0x38) 18:57:32 executing program 2: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) 18:57:32 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 18:57:32 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x10) 18:57:32 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) 18:57:32 executing program 4: write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:32 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x400300, 0x0) 18:57:32 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:32 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 18:57:32 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x2, &(0x7f0000001c40)=@raw=[@map_idx_val], &(0x7f0000001d00)='GPL\x00', 0x8}, 0x90) 18:57:32 executing program 2: syz_clone(0xd0080000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:32 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000540)={&(0x7f0000000100)=@in, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1, &(0x7f0000000480)=""/181, 0xb5}, 0x0) sendmsg$inet(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)="e81a36f6aefbe2b5b77789d31222e8ec6b26d96f731f828b1857c08911d4b38c1901eaf83ef03745fa690678dd6a135aea68623bd10fddc6f8f19b201f4b380634c4abe19b2932b1af37e8a241bb696b1c552fb9c848f7", 0x57}, {&(0x7f0000000600)="957b6b9af05efa0e74a4435d9e0fe731f245edd032ed25995b3510b581d85c30618adeca590492c12a9e658a8cbf6864a687b1ddfc8419264c8c5da862b89337bef7363b09c8f3591970792ded407148c36639c99d3fc1ffa3d9a0b38c3b3c90ad6454219e32e55fa3eff2b90da1be3d601b56852c589b4b", 0x78}], 0x2}, 0x0) 18:57:32 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:32 executing program 4: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9}, 0x48) 18:57:33 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:33 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 18:57:33 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x1e, 0x0, 0x0) 18:57:33 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x143221, 0x0) 18:57:33 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:33 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 18:57:33 executing program 4: openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:57:33 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f0000000040)=@ringbuf, &(0x7f0000000100)='GPL\x00', 0x4}, 0x90) 18:57:33 executing program 1: r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="4867000902000000e4a17c45c8d2609c", 0x10}], 0x1}, 0x0) 18:57:33 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:33 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x2000)=nil, 0xc000) 18:57:33 executing program 4: pipe2(0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x26000804) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) 18:57:33 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 18:57:33 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284c", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100), &(0x7f0000000180), 0x0}) 18:57:33 executing program 4: pipe2(0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x26000804) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) 18:57:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'xfrm0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) 18:57:34 executing program 4: pipe2(0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x26000804) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) 18:57:34 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003640)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)='v', 0x1}], 0x1}, 0x0) 18:57:34 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284c", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:34 executing program 4: pipe2(0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x26000804) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) 18:57:34 executing program 5: pipe2(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000140)={'veth0_to_batadv\x00'}) 18:57:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100), &(0x7f0000000180), 0x0}) 18:57:34 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:34 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8941, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:34 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x1, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000080), &(0x7f0000000480)}) 18:57:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100), &(0x7f0000000180), 0x0}) 18:57:34 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284c", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:34 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) 18:57:34 executing program 4: pipe2(0x0, 0x80000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 18:57:34 executing program 5: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 18:57:34 executing program 4: openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x220080, 0x0) 18:57:34 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba5", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:34 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:34 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100), &(0x7f0000000180), 0x0}) 18:57:34 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8912, 0x0) 18:57:34 executing program 4: pipe2(0x0, 0x0) ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) write$usbip_server(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x0, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x20008000) r1 = socket(0x0, 0x6, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000840)) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) accept4$netrom(r1, 0x0, &(0x7f00000009c0), 0x0) read$fb(0xffffffffffffffff, 0x0, 0x0) 18:57:34 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000d80), 0x4) 18:57:35 executing program 5: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 18:57:35 executing program 3: socket$kcm(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:35 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0xff, 0x81, 0x1, 0x5e, @local}, 0x10) 18:57:35 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8916, 0x0) 18:57:35 executing program 4: timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0xa6cf0806eb1655f4, @thr={0x0, 0x0}}, 0x0) 18:57:35 executing program 5: socket(0x29, 0x2, 0x5b70) 18:57:35 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba5", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:35 executing program 3: socket$kcm(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:35 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$usbip_server(r0, 0x0, 0x0) 18:57:35 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8929, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:35 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)}) 18:57:35 executing program 3: socket$kcm(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:35 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8936, 0x0) 18:57:35 executing program 5: pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$usbip_server(r0, &(0x7f0000000340)=@ret_unlink, 0x30) 18:57:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x541b, 0x0) 18:57:36 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba5", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:36 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:57:36 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)}) 18:57:36 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x891e, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)}) 18:57:36 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:36 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000340)) 18:57:36 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b32", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:36 executing program 4: accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001340)='./binderfs/custom1\x00', 0x0, 0x0) 18:57:36 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)}) 18:57:36 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x80108906, 0x0) 18:57:36 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x4040) 18:57:36 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000700), 0x4) 18:57:37 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:37 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 18:57:37 executing program 5: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000180)={0x0, r0/1000+10000}) 18:57:37 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b32", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:37 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000840)={0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:57:37 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:37 executing program 1: socketpair(0xa, 0x0, 0x0, &(0x7f0000000900)) 18:57:37 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) 18:57:37 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) 18:57:37 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b32", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:37 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:37 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8992, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:37 executing program 4: socketpair(0x22, 0x0, 0xdf, &(0x7f00000000c0)) 18:57:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}}, 0x0) 18:57:37 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:37 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000480)={0x0, 0x1, &(0x7f0000000380)=[0x0], &(0x7f00000003c0), &(0x7f0000000400), 0x0}) 18:57:37 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_gettime(0x0, &(0x7f0000000180)) 18:57:37 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:37 executing program 1: socket(0x3, 0x0, 0xffffffba) 18:57:37 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8930, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:37 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) 18:57:37 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:37 executing program 5: pipe2(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) socketpair(0xa, 0x6, 0x0, &(0x7f0000000000)) 18:57:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:37 executing program 2: futex(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 18:57:37 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000080)=[{}, {{}, {0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000080)}) 18:57:37 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x5450, 0x0) 18:57:37 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:37 executing program 1: pipe2(&(0x7f0000000b00)={0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x541b, 0x0) 18:57:38 executing program 2: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={0x0}}, 0x40041) 18:57:38 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 18:57:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:38 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8940, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:38 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb140, 0x0) 18:57:38 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:38 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0x1}, 0x20) 18:57:38 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x30, 0x384, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x380000}) 18:57:38 executing program 3: socket$kcm(0x11, 0x0, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:38 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x5450, 0x0) 18:57:38 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 18:57:38 executing program 4: openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000140), 0x120c3, 0x0) 18:57:38 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000640), 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x2, 0x0) pipe2(&(0x7f0000000b00)={0xffffffffffffffff}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) pipe2(&(0x7f0000000b00)={0xffffffffffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0xc000) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) msgget(0x3, 0x600) 18:57:38 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:38 executing program 3: socket$kcm(0x11, 0x0, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:38 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x60203, 0x0) 18:57:38 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$netrom(r0, &(0x7f0000000000)={{0x3, @null}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @default, @bcast]}, 0x48) 18:57:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)={0x6c, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) 18:57:38 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 18:57:38 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:38 executing program 3: socket$kcm(0x11, 0x0, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:38 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x40086602, 0x0) 18:57:38 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$vhost_msg(r0, &(0x7f0000000780)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 18:57:38 executing program 1: pipe2(&(0x7f0000000b00), 0x0) r0 = timerfd_create(0x9, 0x0) timerfd_gettime(r0, &(0x7f0000000100)) 18:57:38 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000480)={0x319291eb, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:57:38 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000400)={@val, @void, @eth={@broadcast, @broadcast, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0159f9", 0x44, 0x29, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x600}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x4}}}}}}}}}, 0x82) 18:57:38 executing program 1: socketpair(0x2, 0x0, 0x10090e, &(0x7f00000001c0)) 18:57:38 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:38 executing program 2: socket$isdn(0x22, 0x3, 0x1) 18:57:38 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000480)={0x319291eb, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:57:38 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8911, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:38 executing program 2: bpf$BPF_PROG_QUERY(0x17, 0x0, 0x0) 18:57:39 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:39 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000480)={0x319291eb, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:57:39 executing program 5: socket(0x23, 0x0, 0x800) 18:57:39 executing program 1: timer_create(0x7, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f00000001c0)) 18:57:39 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:39 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000640), 0x52840, 0x0) 18:57:39 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000480)={0x319291eb, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:57:39 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:39 executing program 1: pipe2(0x0, 0xc80) 18:57:39 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x101282, 0x0) 18:57:39 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local, {[@cipso={0x86, 0x6}]}}}}}) 18:57:39 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca9", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:39 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$fb(r0, 0x0, 0x0) 18:57:39 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:57:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) 18:57:39 executing program 2: accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:57:39 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, 0x0) 18:57:39 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca9", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:39 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) write$khugepaged_scan(r0, 0x0, 0x0) 18:57:39 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 18:57:39 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:57:39 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0xfff, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000008c0)) 18:57:39 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:39 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca9", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1031.196371][T22098] binder: 22096:22098 ioctl c0306201 0 returned -14 18:57:39 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 18:57:39 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:40 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x5482eba2, 0x440) 18:57:40 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000440)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) 18:57:40 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd0000000080001", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:40 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 18:57:40 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x4020940d, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:40 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000640), 0x800040, 0x0) 18:57:40 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 18:57:40 executing program 2: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 18:57:40 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:40 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd0000000080001", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:40 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)) 18:57:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}}) 18:57:40 executing program 2: r0 = getpgid(0x0) getresuid(0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x3, r1, 0xffffffffffffffff, 0xee01, 0xee01}, 0x1000, 0x0, 0x0, 0x1, 0x0, r0}) getpgid(0x0) syz_usbip_server_init(0x3) 18:57:40 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 18:57:40 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8907, 0x0) 18:57:40 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000001340)='./binderfs/custom1\x00', 0x0, 0x0) 18:57:40 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd0000000080001", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1032.021779][T22143] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1032.028450][T22143] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) 18:57:40 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x40}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) 18:57:40 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) [ 1032.066568][T22143] vhci_hcd vhci_hcd.0: Device attached [ 1032.091022][T22144] vhci_hcd: connection closed [ 1032.093498][ T11] vhci_hcd: stop threads [ 1032.110776][ T11] vhci_hcd: release socket [ 1032.130252][ T11] vhci_hcd: disconnect device 18:57:40 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x7fff]}, 0x8}) 18:57:40 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:40 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x5452, 0x0) 18:57:40 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:40 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) 18:57:41 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x20) 18:57:41 executing program 4: pipe2(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x5452, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:41 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8983, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:41 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:41 executing program 5: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x20400, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x600000d, 0x13, r0, 0x36000) 18:57:41 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:41 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20) 18:57:41 executing program 5: futex(&(0x7f0000000000), 0xa, 0x0, 0x0, 0x0, 0x1) 18:57:41 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8918, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:41 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:41 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:41 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8946, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:41 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:41 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8906, 0x0) 18:57:41 executing program 1: futex(&(0x7f0000000000), 0xa, 0x0, &(0x7f0000000040), 0x0, 0x1) 18:57:41 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f00000001c0)}) 18:57:41 executing program 3: socket$kcm(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:41 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:41 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8991, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:41 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8943, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:41 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f00000001c0)}) 18:57:41 executing program 1: futex(&(0x7f0000000000), 0xa, 0x0, &(0x7f0000000040), 0x0, 0x1) 18:57:41 executing program 3: socket$kcm(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:42 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x84, 0x0, &(0x7f0000000180)=[@clear_death, @decrefs, @acquire_done, @release, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @register_looper], 0x50, 0x0, &(0x7f0000000240)="b6107c38078472ea4f188b0040b25f675df45f778c6e498b03145f828457e91e151fa31128eb960f2cb7448bb920b2023e213d144b7b206be35a86c2b5988e118cef7a91da2070a3827f4a8d45ec8db6"}) 18:57:42 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f00000001c0)}) 18:57:42 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80041, 0x0) 18:57:42 executing program 1: futex(&(0x7f0000000000), 0xa, 0x0, &(0x7f0000000040), 0x0, 0x1) 18:57:42 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:42 executing program 4: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) 18:57:42 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f00000001c0)}) 18:57:42 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x4020940d, 0x0) 18:57:42 executing program 3: socket$kcm(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:42 executing program 1: futex(&(0x7f0000000000), 0xa, 0x0, &(0x7f0000000040), 0x0, 0x1) 18:57:42 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)) 18:57:42 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$fb(r0, &(0x7f0000000040)=""/35, 0x23) 18:57:42 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x0, "e7a83e3437e4250390b37f5c3fffea958a40a105c374149402ac93b96c4368d3"}) 18:57:42 executing program 3: socket$kcm(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:42 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 18:57:42 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x20) socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x1d, 0x0, 0x0) 18:57:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gretap0\x00', 0x0}) 18:57:42 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:42 executing program 1: openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 18:57:42 executing program 3: socket$kcm(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:42 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8918, 0x0) 18:57:42 executing program 3: socket$kcm(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:42 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) pipe2(&(0x7f0000000b00), 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x4040) [ 1034.093033][T22250] can: request_module (can-proto-0) failed. 18:57:43 executing program 4: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) 18:57:43 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:43 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0x401c5820, 0x0) 18:57:43 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) pipe2(&(0x7f0000000b00), 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x4040) 18:57:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, 0x0) 18:57:43 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:43 executing program 2: futex(&(0x7f0000000000)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1) connect$netrom(0xffffffffffffffff, 0x0, 0x0) 18:57:43 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 18:57:43 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:43 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) pipe2(&(0x7f0000000b00), 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x4040) 18:57:43 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8947, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:43 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:43 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:57:43 executing program 2: timer_create(0x3, &(0x7f0000001300)={0x0, 0xa}, &(0x7f0000001340)) 18:57:43 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:43 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8983, 0x0) 18:57:43 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) pipe2(&(0x7f0000000b00), 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x4040) 18:57:43 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)) 18:57:43 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:43 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, 0x20) 18:57:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}) 18:57:43 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0xffffffffffffff6b) 18:57:43 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, 0x0, 0x40051) 18:57:43 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) 18:57:43 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8971, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:57:43 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, 0x0, 0x40051) 18:57:43 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:44 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x40}, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) 18:57:44 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfc, "98f7a5c55fec1aaf"}) 18:57:44 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a80)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:57:44 executing program 5: select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x4}, 0x0, 0x0) 18:57:44 executing program 2: semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x0, 0x14, 0x0) 18:57:44 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, 0x0, 0x40051) 18:57:44 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:44 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000700)=0x6, 0x4) 18:57:44 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:44 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8993, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:44 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 18:57:44 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, 0x0) 18:57:44 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r0, 0x0, 0x0, 0x20000041, 0x0, 0x0) 18:57:44 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, &(0x7f0000000080), 0x0}) 18:57:44 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:44 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000013c0)={0x3, @win={{}, 0x0, 0x0, &(0x7f0000000380), 0x3, 0x0}}) 18:57:44 executing program 5: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000640), 0x10e300, 0x0) 18:57:44 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:44 executing program 4: ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) pipe2(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001340)='./binderfs/custom1\x00', 0x0, 0x0) 18:57:44 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:44 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:44 executing program 1: timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x4, @thr={&(0x7f0000000100), 0x0}}, 0x0) 18:57:44 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, 0x0, 0x0) 18:57:44 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x11}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x34}}, 0x0) 18:57:44 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:44 executing program 1: syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) 18:57:44 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x0, 0x384, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 18:57:44 executing program 5: syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 18:57:45 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8923, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:45 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1036.275868][T22378] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1036.307130][T22378] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 18:57:45 executing program 4: socket(0x0, 0x80e, 0x0) 18:57:45 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:45 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, 0x0}) 18:57:45 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4}, 0x20) 18:57:45 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:45 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @default, @bpq0, 0x0, 'syz1\x00', @default, 0x0, 0x0, [@null, @null, @default, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 18:57:45 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x100) 18:57:45 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:45 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)='&', 0x1}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:45 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="b6"}) 18:57:45 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000180), 0x0}) 18:57:45 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) 18:57:45 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x40051) 18:57:45 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000080)=[{}, {{}, {0x80000000}}]}) r2 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={r1, &(0x7f0000000040), &(0x7f0000000080)}) 18:57:45 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8903, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:45 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:45 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000180), 0x0}) 18:57:45 executing program 1: socket(0x28, 0x0, 0x8) 18:57:45 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x40051) 18:57:45 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x541b, &(0x7f0000000140)={'wlan0\x00'}) 18:57:45 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x120) 18:57:45 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000180), 0x0}) 18:57:45 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:45 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8995, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:45 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x20) 18:57:45 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x40051) 18:57:45 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000200)={0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), &(0x7f0000000180), 0x0}) 18:57:45 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000140)={'ipvlan1\x00'}) 18:57:45 executing program 1: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x40}, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 18:57:45 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 18:57:45 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x6}, 0x40051) 18:57:45 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:45 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x600000d, 0x13, r0, 0x0) 18:57:45 executing program 2: openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x4000) 18:57:45 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) select(0x40, &(0x7f0000000040)={0x9}, &(0x7f0000000080)={0x2}, 0x0, 0x0) 18:57:45 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000P'], 0x0, 0x0, 0x0) 18:57:45 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x6}, 0x40051) 18:57:45 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x172) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f00000010c0)=[{0x0}], 0x1, 0x0, 0x0) 18:57:45 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:46 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7, 0x0) [ 1037.338413][T22465] fuse: Bad value for 'rootmode' 18:57:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f00000008c0)={&(0x7f0000000680), 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x44}, @timestamp_prespec={0x44, 0x4}]}}}], 0x18}, 0x0) 18:57:46 executing program 1: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae4824abad5674ddefbcd4956a2d5eca99f6707f6ad490000003484817ad9555e7df034f988a6f4532aa09b92bd35177b4f524e4e697c4f466129ffaf0fc71b4b875a57334f418de318aac7fd52c04379eeed4cad7ad8f3c76194fd424f245859438352d91afb6f2b6743de35de0dcaf3da3d82b6f5"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./bus\x00') fsync(r0) 18:57:46 executing program 2: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7, 0x0) 18:57:46 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x6}, 0x40051) 18:57:46 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="fc0000004800071fab092504090007000aab6000000000000008e293210001c0000000000000000000000000c0fe00ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66ff5b22a95792e2891cfded815b6ccd243f295ed94e0ad91bd0734babc7c737d670133750800000000000000000000000000a6b567b4d5715587e6d8a1ad0a4f0108", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) [ 1037.514426][T22470] [ 1037.516812][T22470] ====================================================== [ 1037.523857][T22470] WARNING: possible circular locking dependency detected [ 1037.530951][T22470] 6.1.62-syzkaller #0 Not tainted [ 1037.536025][T22470] ------------------------------------------------------ [ 1037.543122][T22470] syz-executor.4/22470 is trying to acquire lock: [ 1037.549566][T22470] ffff88807f74e460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 1037.558410][T22470] 18:57:46 executing program 5: r0 = syz_open_pts(0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000080)='\x00', 0xfce4) execve(&(0x7f0000000000)='.\x00', 0x0, 0x0) 18:57:46 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:46 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000004c0)={0x0, 0x4924924, 0x0, 0x0, 0x7}) [ 1037.558410][T22470] but task is already holding lock: [ 1037.565886][T22470] ffff88806598a1a0 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x7fe/0x1cf0 [ 1037.575413][T22470] [ 1037.575413][T22470] which lock already depends on the new lock. [ 1037.575413][T22470] [ 1037.585853][T22470] [ 1037.585853][T22470] the existing dependency chain (in reverse order) is: [ 1037.594915][T22470] [ 1037.594915][T22470] -> #1 (&iint->mutex){+.+.}-{3:3}: [ 1037.602378][T22470] lock_acquire+0x1f8/0x5a0 [ 1037.607489][T22470] __mutex_lock+0x132/0xd80 [ 1037.612650][T22470] process_measurement+0x7fe/0x1cf0 [ 1037.618410][T22470] ima_file_check+0xed/0x170 [ 1037.623565][T22470] path_openat+0x2687/0x2e60 [ 1037.628775][T22470] do_filp_open+0x230/0x480 [ 1037.633832][T22470] do_sys_openat2+0x13b/0x500 [ 1037.639137][T22470] __x64_sys_openat+0x243/0x290 [ 1037.644548][T22470] do_syscall_64+0x3d/0xb0 [ 1037.649604][T22470] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1037.656060][T22470] [ 1037.656060][T22470] -> #0 (sb_writers#4){.+.+}-{0:0}: [ 1037.663499][T22470] validate_chain+0x1667/0x58e0 [ 1037.668926][T22470] __lock_acquire+0x125b/0x1f80 [ 1037.674348][T22470] lock_acquire+0x1f8/0x5a0 [ 1037.679435][T22470] sb_start_write+0x4d/0x1c0 [ 1037.684588][T22470] mnt_want_write+0x3b/0x80 [ 1037.689660][T22470] ovl_maybe_copy_up+0x111/0x180 [ 1037.695268][T22470] ovl_open+0x108/0x2a0 [ 1037.699986][T22470] do_dentry_open+0x7f9/0x10f0 [ 1037.705322][T22470] dentry_open+0xc1/0x120 [ 1037.710221][T22470] ima_calc_file_hash+0x159/0x1c00 [ 1037.715890][T22470] ima_collect_measurement+0x4d4/0x970 [ 1037.721912][T22470] process_measurement+0x1018/0x1cf0 [ 1037.727762][T22470] ima_file_check+0xed/0x170 [ 1037.732912][T22470] path_openat+0x2687/0x2e60 [ 1037.738144][T22470] do_filp_open+0x230/0x480 [ 1037.743236][T22470] do_sys_openat2+0x13b/0x500 [ 1037.748481][T22470] __x64_sys_openat+0x243/0x290 [ 1037.753901][T22470] do_syscall_64+0x3d/0xb0 [ 1037.758881][T22470] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1037.765333][T22470] [ 1037.765333][T22470] other info that might help us debug this: [ 1037.765333][T22470] [ 1037.775589][T22470] Possible unsafe locking scenario: [ 1037.775589][T22470] [ 1037.783068][T22470] CPU0 CPU1 [ 1037.788460][T22470] ---- ---- [ 1037.793849][T22470] lock(&iint->mutex); [ 1037.798042][T22470] lock(sb_writers#4); [ 1037.804767][T22470] lock(&iint->mutex); [ 1037.811489][T22470] lock(sb_writers#4); [ 1037.815689][T22470] [ 1037.815689][T22470] *** DEADLOCK *** [ 1037.815689][T22470] [ 1037.823861][T22470] 1 lock held by syz-executor.4/22470: [ 1037.829355][T22470] #0: ffff88806598a1a0 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x7fe/0x1cf0 [ 1037.839256][T22470] [ 1037.839256][T22470] stack backtrace: [ 1037.845173][T22470] CPU: 0 PID: 22470 Comm: syz-executor.4 Not tainted 6.1.62-syzkaller #0 [ 1037.853619][T22470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 1037.863809][T22470] Call Trace: [ 1037.867117][T22470] [ 1037.870180][T22470] dump_stack_lvl+0x1e3/0x2cb [ 1037.874906][T22470] ? nf_tcp_handle_invalid+0x642/0x642 [ 1037.880449][T22470] ? print_circular_bug+0x12b/0x1a0 [ 1037.885723][T22470] check_noncircular+0x2fa/0x3b0 [ 1037.890720][T22470] ? add_chain_block+0x850/0x850 [ 1037.895713][T22470] ? lockdep_lock+0x11f/0x2a0 [ 1037.900445][T22470] ? arch_stack_walk+0xf3/0x140 [ 1037.905415][T22470] ? _find_first_zero_bit+0xd0/0x100 [ 1037.910816][T22470] validate_chain+0x1667/0x58e0 [ 1037.915742][T22470] ? tomoyo_check_open_permission+0x347/0x4c0 [ 1037.922057][T22470] ? kasan_set_track+0x60/0x70 [ 1037.926995][T22470] ? reacquire_held_locks+0x660/0x660 [ 1037.932423][T22470] ? __kmem_cache_free+0x25c/0x3c0 [ 1037.937592][T22470] ? tomoyo_check_open_permission+0x347/0x4c0 [ 1037.944156][T22470] ? security_file_open+0x5f/0xa0 [ 1037.949228][T22470] ? do_dentry_open+0x308/0x10f0 [ 1037.954217][T22470] ? dentry_open+0xc1/0x120 [ 1037.958782][T22470] ? ima_calc_file_hash+0x159/0x1c00 [ 1037.964112][T22470] ? ima_collect_measurement+0x4d4/0x970 [ 1037.969794][T22470] ? process_measurement+0x1018/0x1cf0 [ 1037.975303][T22470] ? ima_file_check+0xed/0x170 [ 1037.980111][T22470] ? path_openat+0x2687/0x2e60 [ 1037.985097][T22470] ? do_filp_open+0x230/0x480 [ 1037.989819][T22470] ? do_sys_openat2+0x13b/0x500 [ 1037.994719][T22470] ? __x64_sys_openat+0x243/0x290 [ 1037.999803][T22470] ? do_syscall_64+0x3d/0xb0 [ 1038.004443][T22470] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1038.010566][T22470] ? mark_lock+0x9a/0x340 [ 1038.014975][T22470] ? mark_lock+0x9a/0x340 [ 1038.019360][T22470] __lock_acquire+0x125b/0x1f80 [ 1038.024263][T22470] lock_acquire+0x1f8/0x5a0 [ 1038.028807][T22470] ? mnt_want_write+0x3b/0x80 [ 1038.033610][T22470] ? read_lock_is_recursive+0x10/0x10 [ 1038.039023][T22470] ? tomoyo_check_open_permission+0x1f2/0x4c0 [ 1038.045133][T22470] ? __might_sleep+0xb0/0xb0 [ 1038.049819][T22470] ? aa_get_newest_label+0xfb/0x6e0 [ 1038.055107][T22470] ? end_current_label_crit_section+0x170/0x170 [ 1038.061394][T22470] sb_start_write+0x4d/0x1c0 [ 1038.066023][T22470] ? mnt_want_write+0x3b/0x80 [ 1038.070732][T22470] mnt_want_write+0x3b/0x80 [ 1038.075264][T22470] ovl_maybe_copy_up+0x111/0x180 [ 1038.080242][T22470] ovl_open+0x108/0x2a0 [ 1038.084426][T22470] ? ovl_mmap+0x430/0x430 [ 1038.088779][T22470] ? __mnt_want_write+0x64/0x2a0 [ 1038.093746][T22470] ? fsnotify_perm+0x42f/0x590 [ 1038.098636][T22470] ? ovl_mmap+0x430/0x430 [ 1038.103107][T22470] do_dentry_open+0x7f9/0x10f0 [ 1038.107941][T22470] dentry_open+0xc1/0x120 18:57:46 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) listen(r0, 0x0) [ 1038.112333][T22470] ima_calc_file_hash+0x159/0x1c00 [ 1038.117490][T22470] ? __might_sleep+0xb0/0xb0 [ 1038.122112][T22470] ? reacquire_held_locks+0x660/0x660 [ 1038.127536][T22470] ? ima_alloc_tfm+0x310/0x310 [ 1038.132358][T22470] ? ext4_xattr_get+0x53c/0x7f0 [ 1038.137324][T22470] ? __up_read+0x2b9/0x690 [ 1038.141782][T22470] ? up_read+0x20/0x20 [ 1038.145901][T22470] ? cap_inode_killpriv+0x40/0x40 [ 1038.150982][T22470] ? ext4_xattr_get+0x53c/0x7f0 [ 1038.156054][T22470] ? bpf_lsm_inode_getsecurity+0x5/0x10 [ 1038.161705][T22470] ? ext4_initxattrs+0x110/0x110 18:57:46 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/96) [ 1038.166680][T22470] ? vfs_getxattr+0x6cc/0x740 [ 1038.171421][T22470] ? __vfs_getxattr+0x410/0x410 [ 1038.176312][T22470] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1038.182509][T22470] ima_collect_measurement+0x4d4/0x970 [ 1038.188018][T22470] ? ima_get_action+0xa0/0xa0 [ 1038.192736][T22470] ? ovl_own_xattr_set+0x10/0x10 [ 1038.197728][T22470] process_measurement+0x1018/0x1cf0 [ 1038.203154][T22470] ? ima_file_mmap+0x1c0/0x1c0 [ 1038.207965][T22470] ? fsnotify_perm+0x428/0x590 [ 1038.212790][T22470] ? inode_to_bdi+0x65/0xd0 [ 1038.217406][T22470] ? file_ra_state_init+0x38/0xb0 [ 1038.222557][T22470] ? ovl_open+0x16b/0x2a0 [ 1038.226925][T22470] ? aa_get_current_label+0x111/0x1d0 [ 1038.232332][T22470] ? apparmor_current_getsecid_subj+0xac/0x110 [ 1038.238528][T22470] ima_file_check+0xed/0x170 [ 1038.243152][T22470] ? do_dentry_open+0xc1d/0x10f0 [ 1038.248133][T22470] ? ima_bprm_check+0x2b0/0x2b0 [ 1038.253064][T22470] path_openat+0x2687/0x2e60 [ 1038.257704][T22470] ? do_filp_open+0x480/0x480 [ 1038.262424][T22470] do_filp_open+0x230/0x480 [ 1038.266963][T22470] ? vfs_tmpfile+0x4a0/0x4a0 [ 1038.271609][T22470] ? _raw_spin_unlock+0x24/0x40 [ 1038.276508][T22470] ? alloc_fd+0x59c/0x640 [ 1038.280947][T22470] do_sys_openat2+0x13b/0x500 [ 1038.285671][T22470] ? do_sys_open+0x220/0x220 [ 1038.290301][T22470] ? xfd_validate_state+0x6a/0x140 [ 1038.295454][T22470] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 1038.301394][T22470] __x64_sys_openat+0x243/0x290 [ 1038.306297][T22470] ? __ia32_sys_open+0x270/0x270 [ 1038.311272][T22470] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1038.317298][T22470] ? lockdep_hardirqs_on+0x94/0x130 [ 1038.321115][T22473] loop1: detected capacity change from 0 to 32768 [ 1038.322522][T22470] ? syscall_enter_from_user_mode+0x2e/0x220 [ 1038.322564][T22470] do_syscall_64+0x3d/0xb0 [ 1038.322591][T22470] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1038.322616][T22470] RIP: 0033:0x7f70b1c7cae9 [ 1038.322635][T22470] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1038.322654][T22470] RSP: 002b:00007f70b29240c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1038.322677][T22470] RAX: ffffffffffffffda RBX: 00007f70b1d9bf80 RCX: 00007f70b1c7cae9 [ 1038.322693][T22470] RDX: 0000000000000007 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1038.322708][T22470] RBP: 00007f70b1cc847a R08: 0000000000000000 R09: 0000000000000000 [ 1038.322722][T22470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.322736][T22470] R13: 000000000000000b R14: 00007f70b1d9bf80 R15: 00007fff7a999758 18:57:47 executing program 4: syz_emit_ethernet(0x97, &(0x7f0000000100)={@broadcast, @random="7d2357d30e4d", @val, {@ipv4}}, 0x0) 18:57:47 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/96) 18:57:47 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x6}, 0x40051) [ 1038.322759][T22470] [ 1038.322804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1038.431690][T22473] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (22473) [ 1038.469863][T22473] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1038.481604][T22473] BTRFS info (device loop1): turning on sync discard [ 1038.495956][T22473] BTRFS info (device loop1): using free space tree [ 1038.548075][T22473] BTRFS info (device loop1): enabling ssd optimizations 18:57:47 executing program 1: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae4824abad5674ddefbcd4956a2d5eca99f6707f6ad490000003484817ad9555e7df034f988a6f4532aa09b92bd35177b4f524e4e697c4f466129ffaf0fc71b4b875a57334f418de318aac7fd52c04379eeed4cad7ad8f3c76194fd424f245859438352d91afb6f2b6743de35de0dcaf3da3d82b6f5"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./bus\x00') fsync(r0) 18:57:47 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:47 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/96) 18:57:47 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/96) 18:57:47 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:47 executing program 4: open$dir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 18:57:47 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:47 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/96) 18:57:47 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae4824abad5674ddefbcd4956a2d5eca99f6707f6ad490000003484817ad9555e7df034f988a6f4532aa09b92bd35177b4f524e4e697c4f466129ffaf0fc71b4b875a57334f418de318aac7fd52c04379eeed4cad7ad8f3c76194fd424f245859438352d91afb6f2b6743de35de0dcaf3da3d82b6f5"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./bus\x00') fsync(r0) 18:57:47 executing program 5: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/96) 18:57:47 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:47 executing program 5: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/96) [ 1039.103068][T22530] loop4: detected capacity change from 0 to 32768 [ 1039.110994][T22530] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (22530) [ 1039.129224][T22530] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1039.139026][T22530] BTRFS info (device loop4): turning on sync discard [ 1039.142227][T22535] loop1: detected capacity change from 0 to 32768 [ 1039.149561][T22530] BTRFS info (device loop4): using free space tree [ 1039.155075][T22535] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor.1 (22535) [ 1039.180708][T22530] BTRFS info (device loop4): enabling ssd optimizations 18:57:48 executing program 1: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae4824abad5674ddefbcd4956a2d5eca99f6707f6ad490000003484817ad9555e7df034f988a6f4532aa09b92bd35177b4f524e4e697c4f466129ffaf0fc71b4b875a57334f418de318aac7fd52c04379eeed4cad7ad8f3c76194fd424f245859438352d91afb6f2b6743de35de0dcaf3da3d82b6f5"], 0x1, 0x559d, &(0x7f0000005680)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMGrcjR/FiH6yxrif7lunqLrVZRcCSjvf7x9dp+p3nrceXefeW+cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/Max/9MYj/umiJ0eP2jBvwPJXDv/vH9YfumzRO//rT89ed9ve8763ftWSJZV/en7jSZO/c8PhjRtWTnghhJbOcmVJ8bLTF6/4waoLvvGtB0+76e5395y9tCpTbyYe+nb8Kc/cuTK2+tt+IawsC6EiHRhcmwQqM/drY30Da0PYKWwOZEu09UlKpBsOj9WEsDBsDmSr+lFNCLU5gXG/fGT1vI7E9TUh7B9CqE638e/VSRs16UBjVRLokw5Mq0gCH3ycyAZWlScB2GrxzZB90S9vyc9Q33W5Iq+/ym3Wsc9Xeni9YqK+eL63jt3OncpRlX6gZauetoLq2C4K3h5rvNt6wLutYDtf42nL/SKV+Yby8eZQdSif1DZ5wqz2mfGR8tDU1KtYTdvpeX5x4yUTtyTdY16HsQP12+R1+Pj5A+9c0Dhm15sf3jD59apnF2xtN4tt3u2tOmRecz3meYxG+jzpAW+/gm9JDb50hRBuP37T2799aez//dWDTw9+75tDzxrywitD627+7rR+f332/6m8ZerGgvl//SfP/+PLOd6W5+WOrX5Yl8zN4yO1MfF2XTI3BwAAgB6jJ+w1fWPEQW/Xrmt4eN+vr5h83qJ5r51+7p+rftp3wkEnnjL0+3fcOPW0gvl/Q2nH/+Mh/9rc0a4JYWRn4or+Ieze+XgSWBq7c1b/EPbpTLXkB45NBdaEsEdnYlC2qlSJ3rFEQyrwRl0mMDIVWBsDLanA4hi4JhW4MgaWpwITY2BNKnBcDIQp+eM4qC4zjpIDNTHQmmzE5fEshD/UxdZS2+qlbFUAAADbSGZ2WJl/N+dch63NEKeXy2u6yxDPwC6aoTpVQ3oGm51WFa2horsayrurITvuOZ88/IKay7qrueA0jLL8DO8deN/c1Q/8249vnHDYUwd92HrGy+tXPTp6U6+/e2fMjy8dN3/Y+IL5f/Mnz/+ru+hIWcHx/xDGdv6NucszkfZsvLUlLwMAAACwFSpeW3ryL+Z+VLbkZ+ds3P8vTxt3de8V++47YO3B9/2/hjcHHL9q/4L5/8jSzv+P+0R65WQO6+JuiKn9Q2jODyTVjigMJEe9+2YCAAAA0BNkj8dnj4VPydwmp2in59OF+Vu2MH888D+yy/yDx129rnn17adMGXHomjWbztj15WUbntpl/3deOPDk00+4f2rDPQXz/5bSzv/vk3+bdGJt7MV1/UPonRN4PPayI9CpIQbWH5MfyIx/bdwAV8WqMicmZKu6KpZojYHmVGBhsRLPZEvsnh/IPFnZxq/IjmNKpkROAAAAAD5zcXdAPC4fz/9/+tx+j/7jslsueXDJutD37OW/uOzo4QPnD+791rRnDnnkb989eWrB/L91y87/75wHF5ze3943hCEVIfRK/zBgXZ9kYcAYqC3LJH7cJ6mrV7qqy/uEMKJjYOmqNmTW/69IrzH4XE1SVQzsvu8dGxs7ErfXhDAkN/DC+EXDOxKzUoFs439VE8LeHaNNN76id9J4ZbrxG3uH8JWcQLaqib1D6GisKl3Vo9WZ6xikq1peHcLOOYFsVYdXhzA7ANBTxf+lk3IfvHD2xVMntLe3zdiOibgTvyZMntLe1jRxWvuk6iJ9mpTqc946RnMLx1TqpW9ezqxRdNeopv6lpLM/FGzObSuzI7/gzMHM/fhlqLJznMMq8+4ekh7ygfsVNhFyvkoVG3L5dh5yn9xKNj+JBfXH/FWhb+g968K2GU0XTZg5c8bQ5G+p2Yclf+NxpmRbDU1vqz5d9a2El0fR5bJSPu22asytZMjM86YPuXD2xYOnnDfh7Laz284/bPhhRxwx7NBDhw/pGFRz8rebkTZ2VXNqpB8vKnFY23CkX67IqeSz+NCQkJDoaYlVv9vj5aN3Wfq9FbcsnvHz9qPafv71nXces6Tqmy9suvSy/Z/+Hx8UzP+nf/L8P37qxA/+zPoMxY7/18fD/Mnjmw/zt8bAwlKP/9cXO5qfPTGgIRWYEwNzHOYHAADgiyHujox7M+NO6Ufm7/Yvd467b8z89Qc/ue65svV9Dv77D39fXnnZuP9yzAMNt333bwrm/3NK+/3/Nlr/P7t0/ahiy/wPiiWai63/n17mP7v+/5xi6/+nl/nPrv+/8HNY/39WNpDaJH+w/j8AAPBF8Nmt/9/t8v7pCwQUZOh2ef/0BQIKMnS7jH+pFwjY4vX/H2k4aORPVn/nN43LLpj2zn8bct/oAXs2/O6Rva6cNHXk6NEjBv9Lwfz/mtLm/xbuBwAAgB3HAROPfWrjpL2Pvfp/3rbTHj9p/fauh+3y/WVHts3ftH7i39z27jl/XTD/X1ja/P+zX/8vFDv/v6FYoKXYwoDW/wMAAKCHKrb+39Abv3X5q4uPu/+ey6eNam0dP/uKq/dbfUD1qeGl0fMb/mLGvR8VzP+Xlzb/j6ddlOfljr35sC5Z0y6k17R7uy77kwEAAADoGcpDU1NliXnzFkY99tO3+WJmKdBPSud68sH9nn/gqyNOnL+46urXynYb9vFT1888+Piv/fDVjXtdcse55+1XMP9fU9r8P+93GY+fP/DOBY1jdv3w5oc3TH696tkFm4//AwAAANtPqfslAAAAAAAAAAAAAACAz98JD//k6rcnLvnanIW/3PWnvcY+u3zDrDlNs2uvf/WH1/7qiDsfHlfw+/8wtrNcsd//x+v+xd8XfCkvd2y1+/X/MvfHjb57dueShevqQtgvNzD18qk7hcy1+Q/IDaw+fdBuHYnL0yUeeuW41zoSZ6YDJw4e8H5H4shUoDUukrhHOhCvqvh+v1QgLq/4XDoQt8fydKAqE/hev2QcZelt9WZtsq3K0tvqxdoQ+ucEsttqZW3SRll6gNenAtkBXpAOxAGelAmUp3t1d9+kVzFQG4ve2jfpFQAAO6z4LbAyTJ7S3tYcv8LH2y9X5N9GeUuWzS2stqzE5l/OLE1216im/qWke6W/i26+1nhlqO4YwtCCr6u5Wco6R7ltaulm032pyJC7W+2tvEi5tC3ddFXFR1STjKhp4rT2SZXdDvyQ7rMMq+g2y9CCyU5ulvLOTVpCLSX0pYQRlbhtSuhyvF8empp6pXJ9NQbrQ57uXhGl/l4/d52/Yq+C3DxPvtn+1BP//PzKfR7/89Nnf/BXk7596byzznj3yHOq/+E/lz39XwfuXDD/ry9t/l+dO673MxcDmBOvrDeifwitJY4IAAAAvvjOOf+V+d999No31rc0vjZtyLWr/3X2jRdX1C298i9ffOhvN42/+sytjb/58zv2eXjyhGe+dO4hy054fZ+DL2s88637/mLeuAev6nvLD+ff8YOC+X9DafP/uAcrcyg42duxJl7//4r+IXReWr8+CSyNwz2rfwj7dKZaYonkgvqjYonmJLA07jAZFEu0tuRX1TsGlqcCb9RlAmtSgbUxkNlLcUfI7Mq5ti6E4Z2psfklpscS9anAN2OgIRVoioHmVKBfDIxMBX7fLxNoSQWejIEwJX9b3dcvs60AAAC2RGaeVZl/N6TnecsrustQ1l2GPt1lKO8uQ3V3GYqNIt6/N2aoTJ28UpaTqTJda02qloIM8WL4W9yvggzhmfyc6YIFTcfzD7LnG5TlZ3jg5K/ec9WCyYPKf/XR2qWt790/ccWts49eec5Df/fEpH0X3XX93gXz/+bS5v998m+T1tfG+f/m6/8lgcdj966Lp443xMD6Y/IDmR0Da+Nk96psVS2ZEplJ+1WxxMgYaEgFpsfAyFSgdWwmsHC3/EBmpp1t/Ips41MyJXICAAAA8JmLOwjibpo4///jsmePeqxi0V3/+ur4u+6d89Y99/70nntuvXf07Zu+/twVF7970UcF8/+Rpc3/Y3t9cxu7Mvbmt/1CWFm2uTfZwODaJBD3Y9TGn8cPrA1hp5wdHNkSbX2SElWphsNjNckv1KvSVf2oJlljIN4f98tHVs/rSFxfE8L+OXtfsm38e3XSRk060FiVBPqkA9MqkkDc85MNrCpPArDVsnsF4wsqc6pLVn3X5Yq8/r4o1wRND69gH2gX+br6zdX2Up1+ILNPNWvLnraC6tguCt4ea7zbeuK7rd67LfeLVOYbysebQ9WhfFLb5Amz2mfGR3J/yVpgOz3Pub9SLSW9DV6Hcz59b7tXne5Ac+rjo7nrcl2/DstidY+fP/DOBY1jdr354Q2TX696dkHJ3Sgi/lD4maoB9bmbd3urDpnXXI/7PGnxedIT/w00eNpCCBsuPeG6kVXTr1g5+pAj93rttFOqZ7437+/vf+mBd/f9xxUTh31tQMH8v6W0+X9F6rbTH+PGvLB/CAfmbNx1cfMf3z/5HMwJJJ+SOxcGkkPur9YV/eQEAACAbS27uyO7v2BK5jY5ITw9Ty7M37KF+eP+ipFd5i+13z8adMpe9+9297hrTz3qpn/+zdh+G8e/uOSYFa1HNS49+mf/6cyaeQXz/9ZPnv/3TnXT8X/H/9lOHP/v0o6+K7p3+oE5W7UruqA6tgvH/7u0o7/bHP/vkuP/jv93xfH/bjj+36Ud/Wkr+JY03ZeuEMKwMWcMrr1r8BPvD1z96yeemvJvc1sn3PONq27Z8+Nv1y9eUL9r34L5//TS5v/W/+t60b7s+n+txdb/m15s/b851v8DAAC2qyILzaXneQWr9xVkSK/eV5Ch2wUCu11i0Pp/W7z+32NHHTl++ejFv16z95gDLus7d+6puzx504stM9+vue2D93f7xYGjCub/c0qb/8eXQ9/c1nvK+n8NY4tUdU0MTLcwIAAAADuiYjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HztfsN1449prj7pN8dfWjP6+w+tO6D6mldOvXTZhFsnfeX28wfNWrFkSeWfnt940uTv3HB444aVE14IYUpnubKkeNnpi1f8YNUF3/jWg6fddPe7e85eWp2ptzJzu2de7tjqh3UhLMx5pDYm3q7ruLM5MG703bMrOhLr6kLYLzcw9fKpO3UkFteFcEBuYPXpg3brSFyeLvHQK8e91pE4Mx04cfCA9zsSR2YCZenu/kO/pLtl6e7O6xdC/5xAtrvn9suvKtvGCZlAebqNf6pN2oiB2lj0xtqkjRhojyWm9A5hSEUIvdJV/aw6qapXuqr/XZ1U1Std1WXVIYwIIVSkq/p1VVJVRXrkz1QlVcXA7vvesbGxI7GoKoQhuYEXxi8a3pGYkQpkGz+lKoS9O14y6cbvq0war0w3fkNlCF8JIVSlS2yqSEpUpUtsqAhh55zA5o1YEcLswBdD/PSZlPvghbMvnjqhvb1txnZMVGXaqgmTp7S3NU2c1j6pOtWnYspy0h/P/fRjf3njJRM7bu8a1dS/lHRFplxlZ5eHVebdPWRH733sV5/cSjY/HwX1x/xVoW/oPevCthlNF02YOXPG0ORvqdmHJX97ZaLJthraU7ZVY24lQ2aeN33IhbMvHjzlvAlnt53ddv5hww874ohhhx46fEjHoJqTv9tipIs++5F+uSKnks/i/S8hIdHTEuV5n27NO/rneMEX/c0drQzVnR/QBdOK3CxlnaPcFoM+9lOO+NN8Tel2REMLJg4FWYZ1n+WQgsnE5iw1SZbOr3UFk8Pcmso7N2m8Xx6amnoV2w71+XdzN+9bW7F5X8xsulLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZh9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwKAAD//y85Ijg=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./bus\x00') fsync(r0) 18:57:48 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000000)=""/96) 18:57:48 executing program 3: socket$kcm(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x6}, 0x40051) 18:57:48 executing program 5: msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) 18:57:48 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000036c0), 0x4, 0x200) sendmsg$nl_route(r1, &(0x7f00000035c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003600)=@bridge_newvlan={0x54, 0x70, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xa}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x52, 0x3}}}]}, 0x54}}, 0xe010) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a00)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x132}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dummy0\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_virt_wifi\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}]}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x98}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)=@getqdisc={0x34, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0xf}, {0xb, 0x7ff4}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004080)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="34000000200004000010b8010000050e00010008000b0002000000080018004e224e2308000a0006000000290b8d6594565ee7b5813e26c6c1de50b4e4afa74d3b50bfef12090f7fe015e6e0c51e0fb3b1d40b2cdd41028b6860f1a26bfaf77f2b7455dc4234aa3a51c2ce537b87111a7b7d7cc06687dc1958c9ef644b"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000000)="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", 0xfc) r7 = dup3(r0, r6, 0x0) accept4(r7, &(0x7f0000003c80)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000003d00)=0x80, 0x80000) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000003fc0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003f80)={&(0x7f00000045c0)={0x190, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6}]}, @NFQA_CT={0x158, 0xb, 0x0, 0x1, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x51d}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x940}]}, @CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x44, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0xff, 0x80}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x80}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x6, 0x21}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0xa}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10000}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2b1e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x105}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFQA_CT={0x18, 0xb, 0x0, 0x1, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x6) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003880)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r5, @ANYBLOB="0c7f8583323972fc72cafdef9a99c0e29150a824b9006e8a9055926f43b6bba8dd9e"], 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000003d40)={0x1, 0x3}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003900)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="774e2dbd7000fb70df25024b3fa6a6ee4ca920ecd000000008000100b5f2f3c49d21a5", @ANYRES32=0x0, @ANYBLOB="29999b4a4f0000000803026e01000000080048850000004fd74078f80bb94370070af6ff4608048b20c49cb4d1838c6b5ce100784aa307565ebbfa08d36cd3c99444b9c99693b3726d57874fdcdb33686c6c9d2c96717f22d286afe3a51dfde8e6c770d842284cbe7ba50b3243", @ANYRES16, @ANYRES8=r1, @ANYRES32=r5, @ANYRESHEX], 0x54}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000003c40)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003bc0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r7, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES64=r8, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES64=0x0], 0x148}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x7}]}, 0x24}}, 0x0) preadv(r0, &(0x7f0000003500)=[{&(0x7f0000000240)=""/210, 0xd2}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/96, 0x60}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000001340)=""/47, 0x2f}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/167, 0xa7}, {&(0x7f0000002440)=""/165, 0xa5}, {&(0x7f0000002500)=""/4096, 0x1000}], 0xa, 0x20, 0x8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000040), 0x4) 18:57:48 executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae4824abad5674ddefbcd4956a2d5eca99f6707f6ad490000003484817ad9555e7df034f988a6f4532aa09b92bd35177b4f524e4e697c4f4661