@empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:20:36 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) syz_open_dev$usbmon(&(0x7f0000000540), 0x6, 0x200) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:20:36 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x53, 0xcb, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x18, 0x7, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x6, 0x5, 0x7, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, 0x20, 0x7f, 0x3}}) r5 = geteuid() ioprio_set$uid(0x3, r5, 0x6000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000640)) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000680)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', r4, 0x4, 0x1f, 0x60, 0x3ff, 0x64, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x0, 0x3, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x604, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) [ 64.069359] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.070473] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.071500] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.074061] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.075257] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.077069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.077244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.085608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.086907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.090361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.197228] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.198423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.223552] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.227376] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.228473] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.231096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.247061] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.248094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.255506] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.258923] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.266954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.271791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.274320] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.275601] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.277749] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.279150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.280670] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.281886] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.286284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.287956] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.289608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.295139] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.296568] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.298254] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.301561] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.313263] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.316606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.319899] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.336989] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.346470] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.159914] Bluetooth: hci0: command tx timeout [ 66.161106] Bluetooth: hci1: command tx timeout [ 66.350977] Bluetooth: hci3: command tx timeout [ 66.351947] Bluetooth: hci2: command tx timeout [ 66.414815] Bluetooth: hci5: command tx timeout [ 66.416356] Bluetooth: hci7: command tx timeout [ 66.417275] Bluetooth: hci4: command tx timeout [ 66.478299] Bluetooth: hci6: command tx timeout [ 68.207724] Bluetooth: hci1: command tx timeout [ 68.208211] Bluetooth: hci0: command tx timeout [ 68.397935] Bluetooth: hci3: command tx timeout [ 68.398365] Bluetooth: hci2: command tx timeout [ 68.461838] Bluetooth: hci4: command tx timeout [ 68.462240] Bluetooth: hci7: command tx timeout [ 68.462618] Bluetooth: hci5: command tx timeout [ 68.526713] Bluetooth: hci6: command tx timeout [ 70.253947] Bluetooth: hci1: command tx timeout [ 70.254378] Bluetooth: hci0: command tx timeout [ 70.446050] Bluetooth: hci2: command tx timeout [ 70.446456] Bluetooth: hci3: command tx timeout [ 70.510702] Bluetooth: hci5: command tx timeout [ 70.511102] Bluetooth: hci7: command tx timeout [ 70.511480] Bluetooth: hci4: command tx timeout [ 70.574705] Bluetooth: hci6: command tx timeout [ 72.301778] Bluetooth: hci0: command tx timeout [ 72.302508] Bluetooth: hci1: command tx timeout [ 72.493871] Bluetooth: hci3: command tx timeout [ 72.494552] Bluetooth: hci2: command tx timeout [ 72.558719] Bluetooth: hci4: command tx timeout [ 72.559358] Bluetooth: hci7: command tx timeout [ 72.560194] Bluetooth: hci5: command tx timeout [ 72.622726] Bluetooth: hci6: command tx timeout [ 99.170515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.171208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.277021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.277639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.338774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.346758] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.500299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.501724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:21:14 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000980)=""/115) write$P9_RAUTH(r3, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x40, 0x1, 0x4}}, 0x14) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r10, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:21:14 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000980)=""/115) write$P9_RAUTH(r3, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x40, 0x1, 0x4}}, 0x14) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r10, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:21:14 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r7, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r8, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0), 0xf) write$P9_RATTACH(r4, &(0x7f0000000400)={0x14, 0x69, 0x2, {0x40, 0x1, 0x1}}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xa868}}, './file1\x00'}) write$cgroup_type(r9, &(0x7f00000004c0), 0x9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) [ 101.359731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.360612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:21:15 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r7, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r8, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0), 0xf) write$P9_RATTACH(r4, &(0x7f0000000400)={0x14, 0x69, 0x2, {0x40, 0x1, 0x1}}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xa868}}, './file1\x00'}) write$cgroup_type(r9, &(0x7f00000004c0), 0x9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) [ 101.552245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.553329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:21:15 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r7, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r8, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0), 0xf) write$P9_RATTACH(r4, &(0x7f0000000400)={0x14, 0x69, 0x2, {0x40, 0x1, 0x1}}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xa868}}, './file1\x00'}) write$cgroup_type(r9, &(0x7f00000004c0), 0x9) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file1\x00'}) 00:21:15 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r7, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r8, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0), 0xf) write$P9_RATTACH(r4, &(0x7f0000000400)={0x14, 0x69, 0x2, {0x40, 0x1, 0x1}}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xa868}}, './file1\x00'}) write$cgroup_type(r9, &(0x7f00000004c0), 0x9) [ 101.699352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.700185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:21:15 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r7, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r8, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0), 0xf) write$P9_RATTACH(r4, &(0x7f0000000400)={0x14, 0x69, 0x2, {0x40, 0x1, 0x1}}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xa868}}, './file1\x00'}) 00:21:15 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000980)=""/115) write$P9_RAUTH(r3, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x40, 0x1, 0x4}}, 0x14) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r10, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) [ 101.902141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.903257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.034738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.035862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.297938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.298932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.413743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.414874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.468952] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.609831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.610655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.682609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.683394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.761451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.762269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.850052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.850759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.914165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.914982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:21:30 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x53, 0xcb, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x18, 0x7, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x6, 0x5, 0x7, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, 0x20, 0x7f, 0x3}}) r5 = geteuid() ioprio_set$uid(0x3, r5, 0x6000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000640)) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000680)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', r4, 0x4, 0x1f, 0x60, 0x3ff, 0x64, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x0, 0x3, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x604, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 00:21:30 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r7, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0), 0xf) write$P9_RATTACH(r4, &(0x7f0000000400)={0x14, 0x69, 0x2, {0x40, 0x1, 0x1}}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:21:30 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000980)=""/115) write$P9_RAUTH(r3, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x40, 0x1, 0x4}}, 0x14) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r10, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) 00:21:30 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) syz_open_dev$usbmon(&(0x7f0000000540), 0x6, 0x200) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:21:30 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) r3 = io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x40, 0x6, 0x2, @local, @remote, 0x20, 0x7800, 0x5a8, 0x5290}}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x7d4891c071d5aa7a}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2020022}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x4c}}, 0x4845) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) bind$802154_raw(r9, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:21:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:21:30 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000080)={0x80, "cd80064573fda1ee34e62917a3e37b9a81100dde0edced351aadbbd4bcd60689b8312aeceff3ca6db4b55482b209439a2c2fc891cd370af5dfb012d72f7380d4"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x7fffffff}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000040, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@afid}, {@access_user}], [{@euid_lt={'euid<', 0xee01}}, {@subj_role={'subj_role', 0x3d, '('}}, {@fowner_eq}, {@dont_measure}]}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0xfff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xee01, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000540)=0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x850002, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}, {@posixacl}, {@privport}, {@access_uid={'access', 0x3d, r5}}, {@access_client}, {@nodevmap}], [{@fowner_eq={'fowner', 0x3d, r9}}, {@hash}, {@audit}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@subj_user={'subj_user', 0x3d, '&\x00'}}, {@dont_measure}, {@uid_gt={'uid>', r10}}, {@smackfstransmute}]}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x10000, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@posixacl}, {@fscache}, {@fscache}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@smackfshat={'smackfshat', 0x3d, 'dont_measure'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xc8($'}}]}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r11, 0x89f5, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'ip6tnl0\x00', r8, 0x2f, 0x5, 0x0, 0x5964, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x8, 0x5, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl2\x00', r12, 0x4, 0x5, 0x9, 0x1f, 0x2, @private1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x20, 0x40, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'sit0\x00', r8, 0x29, 0x5f, 0x81, 0x1ff, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x10, 0x5b5dfacd7d02183d, 0x2, 0x1}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r2, {0x1, 0x7fff}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r13, 0xc0a85320, &(0x7f0000000ac0)={{0x20}, 'port0\x00', 0x20, 0x400, 0x1, 0x8001, 0xb6c3, 0x4, 0x2, 0x0, 0x5, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r11, 0xc0189375, &(0x7f0000000bc0)={{0x1, 0x1, 0x18}, './file0\x00'}) 00:21:30 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000001}, 0x8010) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x0, 0x70bd2b, 0x800, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x2000c810) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r8, {0x400, 0x10001}}, './file0\x00'}) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4048850) 00:21:30 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r7, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0), 0xf) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:21:30 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r7, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0), 0xf) write$P9_RATTACH(r4, &(0x7f0000000400)={0x14, 0x69, 0x2, {0x40, 0x1, 0x1}}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:21:30 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) syz_open_dev$usbmon(&(0x7f0000000540), 0x6, 0x200) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:21:38 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x53, 0xcb, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x18, 0x7, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x6, 0x5, 0x7, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, 0x20, 0x7f, 0x3}}) r5 = geteuid() ioprio_set$uid(0x3, r5, 0x6000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000640)) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000680)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', r4, 0x4, 0x1f, 0x60, 0x3ff, 0x64, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x0, 0x3, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x604, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 00:21:38 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000980)=""/115) write$P9_RAUTH(r3, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x40, 0x1, 0x4}}, 0x14) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r10, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) 00:21:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:21:38 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r7, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:21:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) syz_open_dev$usbmon(&(0x7f0000000540), 0x6, 0x200) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:21:38 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r7, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0), 0xf) write$P9_RATTACH(r4, &(0x7f0000000400)={0x14, 0x69, 0x2, {0x40, 0x1, 0x1}}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:21:38 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000001}, 0x8010) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x0, 0x70bd2b, 0x800, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x2000c810) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r8, {0x400, 0x10001}}, './file0\x00'}) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4048850) 00:21:38 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) r3 = io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x40, 0x6, 0x2, @local, @remote, 0x20, 0x7800, 0x5a8, 0x5290}}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x7d4891c071d5aa7a}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2020022}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x4c}}, 0x4845) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) bind$802154_raw(r9, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:21:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:21:46 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000980)=""/115) write$P9_RAUTH(r3, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x40, 0x1, 0x4}}, 0x14) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, r10, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) 00:21:46 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r7, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0), 0xf) write$P9_RATTACH(r4, &(0x7f0000000400)={0x14, 0x69, 0x2, {0x40, 0x1, 0x1}}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:21:46 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) r3 = io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x40, 0x6, 0x2, @local, @remote, 0x20, 0x7800, 0x5a8, 0x5290}}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x7d4891c071d5aa7a}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2020022}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x4c}}, 0x4845) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) bind$802154_raw(r9, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:21:46 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x53, 0xcb, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x18, 0x7, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x6, 0x5, 0x7, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, 0x20, 0x7f, 0x3}}) r5 = geteuid() ioprio_set$uid(0x3, r5, 0x6000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000640)) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000680)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', r4, 0x4, 0x1f, 0x60, 0x3ff, 0x64, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x0, 0x3, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x604, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 00:21:46 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:21:46 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000001}, 0x8010) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x0, 0x70bd2b, 0x800, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x2000c810) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r8, {0x400, 0x10001}}, './file0\x00'}) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4048850) 00:21:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) 00:21:46 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) syz_open_dev$usbmon(&(0x7f0000000540), 0x6, 0x200) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:21:46 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) syz_open_dev$usbmon(&(0x7f0000000540), 0x6, 0x200) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:21:46 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x53, 0xcb, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x18, 0x7, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x6, 0x5, 0x7, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, 0x20, 0x7f, 0x3}}) r5 = geteuid() ioprio_set$uid(0x3, r5, 0x6000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000640)) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000680)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', r4, 0x4, 0x1f, 0x60, 0x3ff, 0x64, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x0, 0x3, 0x2}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000780)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 00:21:46 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:21:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) 00:21:46 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r7, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0), 0xf) write$P9_RATTACH(r4, &(0x7f0000000400)={0x14, 0x69, 0x2, {0x40, 0x1, 0x1}}, 0x14) 00:21:46 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x53, 0xcb, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x18, 0x7, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x6, 0x5, 0x7, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, 0x20, 0x7f, 0x3}}) r5 = geteuid() ioprio_set$uid(0x3, r5, 0x6000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000640)) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000680)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', r4, 0x4, 0x1f, 0x60, 0x3ff, 0x64, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x0, 0x3, 0x2}}) 00:21:46 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) syz_open_dev$usbmon(&(0x7f0000000540), 0x6, 0x200) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:21:46 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:21:46 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000980)=""/115) write$P9_RAUTH(r3, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x40, 0x1, 0x4}}, 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:21:46 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000001}, 0x8010) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x0, 0x70bd2b, 0x800, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x2000c810) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r8, {0x400, 0x10001}}, './file0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:21:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) 00:21:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) syz_open_dev$usbmon(&(0x7f0000000540), 0x6, 0x200) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) 00:21:55 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r7, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) write$vga_arbiter(r5, &(0x7f00000003c0), 0xf) 00:21:55 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) r3 = io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x40, 0x6, 0x2, @local, @remote, 0x20, 0x7800, 0x5a8, 0x5290}}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x7d4891c071d5aa7a}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2020022}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x4c}}, 0x4845) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)={{0x1, 0x1, 0x18}, './file1\x00'}) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:21:55 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x53, 0xcb, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x18, 0x7, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x6, 0x5, 0x7, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, 0x20, 0x7f, 0x3}}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0x6000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000640)) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f0000000680)) 00:21:55 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000980)=""/115) write$P9_RAUTH(r3, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x40, 0x1, 0x4}}, 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:21:55 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000001}, 0x8010) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x0, 0x70bd2b, 0x800, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x2000c810) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000840)={{0x1, 0x1, 0x18, r8, {0x400, 0x10001}}, './file0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:21:55 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:21:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) syz_open_dev$usbmon(&(0x7f0000000540), 0x6, 0x200) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) 00:21:55 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x53, 0xcb, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x18, 0x7, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x6, 0x5, 0x7, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, 0x20, 0x7f, 0x3}}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0x6000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000640)) 00:21:55 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:21:55 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd=r7, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) 00:21:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) syz_open_dev$usbmon(&(0x7f0000000540), 0x6, 0x200) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) 00:21:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:21:55 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000001}, 0x8010) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x0, 0x70bd2b, 0x800, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x2000c810) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:21:55 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x53, 0xcb, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x18, 0x7, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x6, 0x5, 0x7, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, 0x20, 0x7f, 0x3}}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0x6000) 00:22:04 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:22:04 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 00:22:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:04 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000001}, 0x8010) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x0, 0x70bd2b, 0x800, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x2000c810) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:22:04 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) r3 = io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x40, 0x6, 0x2, @local, @remote, 0x20, 0x7800, 0x5a8, 0x5290}}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x7d4891c071d5aa7a}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2020022}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x4c}}, 0x4845) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:04 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000980)=""/115) write$P9_RAUTH(r3, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x40, 0x1, 0x4}}, 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:22:04 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x53, 0xcb, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x18, 0x7, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6tnl0\x00', r3, 0x29, 0x6, 0x5, 0x7, 0x4, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe, 0x20, 0x7f, 0x3}}) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:04 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:04 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:04 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r1, 0x8000000) 00:22:04 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:22:04 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000440)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x53, 0xcb, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x18, 0x7, 0x800}}) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:04 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:04 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) write$P9_RREAD(r1, &(0x7f0000000300)={0xf, 0x75, 0x2, {0x4, "f1fe2cf0"}}, 0xf) 00:22:04 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000001}, 0x8010) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:22:04 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000440)) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:13 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000001}, 0x8010) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:22:13 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400)) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:13 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:22:13 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:13 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000980)=""/115) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:22:13 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) r3 = io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x40, 0x6, 0x2, @local, @remote, 0x20, 0x7800, 0x5a8, 0x5290}}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x7d4891c071d5aa7a}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x94, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:13 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@private0, @in=@private}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) 00:22:13 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:13 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000003c0)) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:13 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:13 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:22:13 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) 00:22:13 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000001}, 0x8010) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:22:13 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:13 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:21 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) sendmsg$TIPC_CMD_SET_NETID(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x1f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000001}, 0x8010) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:22:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:21 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:21 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:21 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000980)=""/115) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:22:21 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000100)) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) 00:22:21 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) r3 = io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x40, 0x6, 0x2, @local, @remote, 0x20, 0x7800, 0x5a8, 0x5290}}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:21 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:22:21 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x240443, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:21 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:21 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:22:21 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) ioctl$HIDIOCGRDESCSIZE(r3, 0x80044801, &(0x7f0000000100)) 00:22:21 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x100, 0x7ff, 0x0, 'queue0\x00', 0x7}) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:21 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:22:21 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:21 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) r3 = io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x40, 0x6, 0x2, @local, @remote, 0x20, 0x7800, 0x5a8, 0x5290}}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x8000000) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:29 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) epoll_create1(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:22:29 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) ioctl$HIDIOCGRAWINFO(r8, 0x80084803, &(0x7f0000000980)=""/115) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:22:29 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000000540)=r6, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:22:29 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1a9e0c15}}, './file0\x00'}) 00:22:29 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:29 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) r3 = io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x40, 0x6, 0x2, @local, @remote, 0x20, 0x7800, 0x5a8, 0x5290}}) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:29 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:29 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 00:22:29 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) epoll_create1(0x0) 00:22:29 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) r0 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xe62}}, './file0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:22:29 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:29 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) epoll_create1(0x80000) epoll_create1(0x0) 00:22:29 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) rt_sigprocmask(0x1, &(0x7f00000001c0)={[0x401]}, 0x0, 0x8) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:29 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:22:29 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x8) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:29 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:22:29 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) write$P9_RATTACH(r3, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x20, 0x3, 0x8}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:29 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) epoll_create1(0x0) 00:22:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:38 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) epoll_create1(0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:22:38 executing program 7: pselect6(0x40, &(0x7f0000000000)={0x6, 0x0, 0x8, 0xdb26, 0x3, 0x200, 0x10001}, &(0x7f0000000040)={0x7, 0x3, 0x3f, 0x100000000, 0x40, 0x6, 0x6, 0x1}, &(0x7f0000000080)={0xffff, 0xb62a, 0x3, 0x8001, 0x62e, 0x44154b0a, 0x3, 0x7cb}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0xfd]}, 0x8}) ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:38 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:22:38 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) epoll_create1(0x0) 00:22:38 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) r3 = io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x40, 0x6, 0x2, @local, @remote, 0x20, 0x7800, 0x5a8, 0x5290}}) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:38 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000500)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') [ 187.757801] Bluetooth: hci7: command 0x0406 tx timeout [ 187.762987] Bluetooth: hci0: command 0x0406 tx timeout [ 187.763606] Bluetooth: hci5: command 0x0406 tx timeout [ 187.764289] Bluetooth: hci6: command 0x0406 tx timeout [ 187.764944] Bluetooth: hci1: command 0x0406 tx timeout [ 187.765544] Bluetooth: hci4: command 0x0406 tx timeout [ 187.766162] Bluetooth: hci2: command 0x0406 tx timeout [ 187.766872] Bluetooth: hci3: command 0x0406 tx timeout 00:22:47 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) r3 = io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:47 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4018cd0}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:22:47 executing program 1: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) epoll_create1(0x0) 00:22:47 executing program 7: ioprio_set$uid(0x3, 0x0, 0x6000) 00:22:47 executing program 3: ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:22:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:47 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) clock_getres(0x1, &(0x7f00000004c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:22:47 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:47 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd, 0x4, 0x74ce, 0x6, 0x4, 0x0, {0x3}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:22:47 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) r3 = io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {0x1}}, './file1\x00'}) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:47 executing program 1: epoll_create1(0x80000) epoll_create1(0x0) 00:22:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:47 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:47 executing program 7: ioprio_set$uid(0x0, 0x0, 0x6000) 00:22:47 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:47 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:22:47 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x1028}, 0x1}, 0xba) 00:22:47 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:22:47 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f00000002c0)="4336490af8d4923ccc0e3ff7bb2034d6afbaa700c5152ed6a078f074fa8e57421deb6e9b788b5fab6b967494f65b1b1590d134ec9eefb39b0523bfa1d795bd0a2b5b0d2e4289abc347d46571ed56f8c70e6c1c12c4536ddeaa1c172ebf0e2fe8ab318e6736a1fc55ee129f93b2d4a502c70b29fd742851294e2020f0e0003dcffbade28f85b99f69c0626a8b1a722c2ab9b0bd391937f429bcdffa6fa29fa6ae846f5debabd15890bdbd9e61fdc4fc14c7081f5ef85f1068") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:47 executing program 1: epoll_create1(0x0) epoll_create1(0x0) 00:22:47 executing program 7: ioprio_set$uid(0x0, 0x0, 0x6000) 00:22:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:47 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:47 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xba) 00:22:47 executing program 7: ioprio_set$uid(0x0, 0x0, 0x6000) 00:22:47 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:47 executing program 1: epoll_create1(0x0) epoll_create1(0x0) 00:22:47 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 00:22:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:47 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000200)=r1, 0x1) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:54 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:22:54 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r2 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r0) io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0xf6, 0x7, 0xfffffffb, 0x1634, 0x6, 0x5}) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:54 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:22:54 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:22:54 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:54 executing program 7: ioprio_set$uid(0x3, 0x0, 0x0) 00:22:54 executing program 1: epoll_create1(0x0) epoll_create1(0x0) 00:22:54 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:54 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) write$hidraw(r3, &(0x7f0000000180)="18a69c095a878b657bf2f9aed1c4ce6db7f4d31ef027ffb19e64db28120084c2deb359f7cb79a4d3b37211def1ff65c62889b6788136e8b241709efba8fee8372c25f241e837f91eb74f675357f04c60121edc1ceb98b6520822194e516d3d6320c8c401ea883afc50b255c3f18e05f48978d46cd826fd5a9a629ed2ee128b3a3ab6ee3628d6f7bd58549d40040a65c14cc9d373aca095241441065667d51fadab0472a6ae5d00a6c78c526d1e25de59d06cf2be50582df49beae62c25d973abfb5300bfc7a605e62849bdd2ed4c0ffc6326", 0xd2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:54 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r1 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r0) io_uring_setup(0xcf9, &(0x7f0000000140)={0x0, 0x857, 0x0, 0x3, 0x1bb}) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:22:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:22:55 executing program 7: ioprio_set$uid(0x3, 0x0, 0x0) 00:22:55 executing program 5: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) r1 = syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r0) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:22:55 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:23:03 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:03 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:03 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:03 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000400)=r5, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:23:03 executing program 7: ioprio_set$uid(0x3, 0x0, 0x0) 00:23:03 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) syz_io_uring_setup(0x3aa6, &(0x7f0000000040)={0x0, 0x1f50, 0x2, 0x3, 0x94}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:23:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:03 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff0001}}, './file0\x00'}) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:23:12 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) setns(r1, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:12 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:12 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:12 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:12 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:12 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:23:12 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) ioctl$HIDIOCGRAWINFO(r5, 0x80084803, &(0x7f0000000300)=""/229) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:23:12 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:21 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:23:21 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) 00:23:21 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:21 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) 00:23:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:21 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) write$P9_RSTAT(r2, &(0x7f00000000c0)={0x4c, 0x7d, 0x1, {0x0, 0x45, 0x0, 0x40, {0x40, 0x2, 0x7}, 0x8000000, 0x0, 0x7f, 0x1, 0x9, ')!]*}$%\'/', 0x7, '/--{n%$', 0x2, '.)'}}, 0x4c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:21 executing program 5: bind$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={0x24, @short={0x2, 0x1}}, 0x14) 00:23:21 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) 00:23:21 executing program 5: bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) 00:23:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:21 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:21 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:23:21 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:23:21 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:21 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:21 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:21 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:23:21 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) 00:23:21 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:21 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_io_uring_submit(r0, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0xd83, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x80000000) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:23:21 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:22 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:22 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:23:29 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r3, r4+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f00000001c0), 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:23:29 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:23:29 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) 00:23:29 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:29 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) 00:23:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:29 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:23:29 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) 00:23:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:23:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:38 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:38 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r2, r3+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:23:38 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) 00:23:38 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) 00:23:38 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:23:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) 00:23:38 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:23:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000005c0), 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:38 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) 00:23:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:46 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:46 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:46 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) 00:23:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:23:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:46 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) 00:23:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:46 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000140)={r2, r3+60000000}, 0x1, 0x0, 0xf3d67b8e9dcfc085}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:23:46 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:46 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:23:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:55 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) 00:23:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:55 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:23:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x2, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:23:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:55 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) 00:23:55 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}, {@mmap}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:55 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:55 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:23:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:23:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:23:55 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) 00:23:55 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) 00:23:55 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:23:55 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:23:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:24:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:03 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:03 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r6) 00:24:03 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:24:03 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:24:03 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)) 00:24:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:03 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}, {@noextend}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:24:04 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6bd5, &(0x7f0000000000)={0x0, 0xe430, 0x0, 0x3, 0x24f}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:24:04 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:04 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:12 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_L}], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:24:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:12 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:12 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x8000000) syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:24:12 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), r5) 00:24:12 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:12 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:12 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)) 00:24:12 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}, {@hash}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:24:12 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:12 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:12 executing program 0: syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:24:12 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}, {@smackfsroot={'smackfsroot', 0x3d, '!*'}}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:24:12 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:12 executing program 0: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:24:12 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:12 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r2, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:20 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:24:20 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@euid_gt}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:24:20 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:20 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r2, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:20 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:20 executing program 0: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:24:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:20 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) socketpair(0x23, 0x3, 0x3, &(0x7f0000000680)) 00:24:20 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:24:20 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:24:20 executing program 0: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/cgroup\x00') 00:24:20 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r4, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:24:20 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:20 executing program 0: syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) 00:24:20 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:20 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r2, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:20 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:24:20 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}]}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:24:20 executing program 0: syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) 00:24:21 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:21 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:28 executing program 0: syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) 00:24:28 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:28 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r3, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:28 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:24:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:28 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:24:28 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) 00:24:29 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000006c0)) 00:24:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:29 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:24:29 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) 00:24:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r3, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:29 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)) arch_prctl$ARCH_GET_GS(0x1004, 0x0) 00:24:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:29 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:29 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:24:29 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) 00:24:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:37 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:24:37 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:24:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r3, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:37 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:37 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)) arch_prctl$ARCH_GET_GS(0x1004, 0x0) 00:24:37 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:37 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)) arch_prctl$ARCH_GET_GS(0x1004, 0x0) 00:24:45 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:24:45 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:45 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)) arch_prctl$ARCH_GET_GS(0x1004, 0x0) 00:24:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:45 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r7, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:45 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r3, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:24:45 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:24:45 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) arch_prctl$ARCH_GET_GS(0x1004, 0x0) 00:24:45 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r2, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:24:45 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:45 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:45 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:45 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:53 executing program 6: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) arch_prctl$ARCH_GET_GS(0x1004, 0x0) 00:24:53 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r2, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:24:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:53 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:53 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:24:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:53 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r4, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:53 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:24:53 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r2, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:24:53 executing program 6: arch_prctl$ARCH_GET_GS(0x1004, 0x0) 00:24:53 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:24:53 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:24:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:24:53 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:53 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r2, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:24:53 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:01 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:01 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:01 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:25:01 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r2, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:01 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r2, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:25:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:01 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:01 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:01 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r2, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:02 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r2, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:25:02 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:02 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:25:10 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:10 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:25:10 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:10 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r2, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:25:10 executing program 2: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r2, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:10 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:10 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:11 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:11 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r3, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:25:11 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r2, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:11 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:25:20 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:20 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:20 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:25:20 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:20 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r3, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:25:20 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r2, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:20 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:20 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:20 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r2, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:20 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:20 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:20 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:25:20 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r3, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:25:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe7, 0xbf57, 0x10, @empty, @empty, 0x80, 0x1, 0x7, 0x9}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:28 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:28 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:28 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r2, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:28 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r3, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:25:28 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:28 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:25:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:29 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:29 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r2, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:29 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:29 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:29 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r3, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:25:37 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r1, 0x4, 0x0, 0x1, 0x8, 0x14, @loopback, @private0, 0x8, 0x40, 0x4, 0x9}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r3, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:25:37 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:25:37 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:37 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:37 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:37 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r3, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:25:37 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:37 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:37 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:37 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:37 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:37 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:25:47 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r3, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:25:47 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:47 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:25:47 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:47 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:47 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:47 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:56 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:56 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:25:56 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:56 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x79, 0xffffffff, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7, 0x10, 0x97a, 0x1}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r1, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r3, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:25:56 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:56 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:56 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:56 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:25:56 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:56 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:56 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:25:56 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:25:56 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:25:56 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:56 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:25:56 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r1, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:26:04 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x5, 0x8, 0x8, @loopback, @empty, 0x700, 0x8, 0x101, 0x97}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r1, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:26:04 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:26:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:04 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:04 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:04 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:04 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:26:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:04 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:04 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:26:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:04 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:04 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:04 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r1, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:26:04 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:04 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:26:04 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:26:04 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:12 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:12 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:26:12 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:12 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:12 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:12 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:26:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:12 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r1, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:26:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:12 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x40080) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:26:12 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:12 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:13 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r1, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:26:13 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:13 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:13 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:13 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:26:21 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:21 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:21 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:21 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:21 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:26:21 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r1, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:26:21 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:26:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:21 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:28 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:26:28 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:28 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:28 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x0, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:28 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:26:28 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5fa5c6e1e56a3313, 0x0, 0xb6}, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r1, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:26:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:28 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:26:28 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) 00:26:28 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:28 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x0, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:28 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:28 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:28 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x0, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x0, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:28 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:37 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:26:37 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:37 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:37 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:37 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x0, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x0, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:37 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) 00:26:37 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r1, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:26:37 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:37 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x0, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0"}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:37 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:37 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:26:37 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:37 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r1, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:26:37 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:37 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r4, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:38 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x0, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0"}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:38 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:38 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) [ 424.653606] [ 424.653862] ===================================== [ 424.654392] WARNING: bad unlock balance detected! [ 424.654915] 6.19.0-rc5-next-20260116 #1 Not tainted [ 424.655473] ------------------------------------- [ 424.656004] syz-executor.3/6337 is trying to release lock (rcu_read_lock) at: [ 424.656803] [] __wait_on_freeing_inode+0x105/0x350 [ 424.657533] but there are no more locks to release! [ 424.658086] [ 424.658086] other info that might help us debug this: [ 424.658799] 4 locks held by syz-executor.3/6337: [ 424.659321] #0: ffff88800f82c3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 424.660314] #1: ffff88801b4aaa00 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 424.661426] #2: ffff88800f838950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 424.662435] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 424.663473] [ 424.663473] stack backtrace: [ 424.663966] CPU: 0 UID: 0 PID: 6337 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 424.663985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 424.663995] Call Trace: [ 424.664001] [ 424.664007] dump_stack_lvl+0xca/0x120 [ 424.664041] ? __wait_on_freeing_inode+0x105/0x350 [ 424.664061] print_unlock_imbalance_bug+0x118/0x130 [ 424.664081] ? __wait_on_freeing_inode+0x105/0x350 [ 424.664101] lock_release+0x1ee/0x270 [ 424.664122] __wait_on_freeing_inode+0x10a/0x350 [ 424.664142] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 424.664164] ? __pfx_var_wake_function+0x10/0x10 [ 424.664188] ? lock_is_held_type+0x9e/0x120 [ 424.664204] insert_inode_locked+0x25f/0x890 [ 424.664227] __ext4_new_inode+0x223d/0x4cd0 [ 424.664251] ? __pfx___ext4_new_inode+0x10/0x10 [ 424.664271] ? __pfx___dquot_initialize+0x10/0x10 [ 424.664296] ? __pfx_avc_has_perm+0x10/0x10 [ 424.664318] ext4_symlink+0x623/0xb40 [ 424.664343] ? __pfx_ext4_symlink+0x10/0x10 [ 424.664365] ? security_inode_permission+0x72/0xe0 [ 424.664383] vfs_symlink+0x44b/0x840 [ 424.664405] filename_symlinkat+0x158/0x440 [ 424.664425] ? __pfx_filename_symlinkat+0x10/0x10 [ 424.664444] ? strncpy_from_user+0x21b/0x2f0 [ 424.664467] __x64_sys_symlink+0x82/0x110 [ 424.664486] do_syscall_64+0xbf/0x420 [ 424.664503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.664520] RIP: 0033:0x7f2f0009d427 [ 424.664533] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 424.664548] RSP: 002b:00007ffe12a92988 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 424.664563] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2f0009d427 [ 424.664573] RDX: 00007ffe12a92a63 RSI: 00007f2f000f8022 RDI: 00007ffe12a92a50 [ 424.664584] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe12a92820 [ 424.664593] R10: 00007ffe12a926d7 R11: 0000000000000206 R12: 0000000000000001 [ 424.664603] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe12a92a50 [ 424.664618] [ 424.692997] ------------[ cut here ]------------ [ 424.693520] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.3/6337 [ 424.714478] Modules linked in: [ 424.714984] CPU: 0 UID: 0 PID: 6337 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 424.735778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 424.765902] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 424.766525] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 424.788351] RSP: 0018:ffff8880465879a0 EFLAGS: 00010286 [ 424.823224] RAX: 00000000ffffffff RBX: ffff888048090000 RCX: ffffffff815660f7 [ 424.842799] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff8880480903fc [ 424.843519] RBP: ffff888048090000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 424.865650] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888048090000 [ 424.914884] R13: 0000000000000001 R14: ffffffff85c0ec80 R15: ffff88803d06c5d0 [ 424.915564] FS: 0000555576a27400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 425.088504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.150520] CR2: 00007f2f0011d543 CR3: 0000000044895000 CR4: 0000000000350ef0 [ 425.211351] Call Trace: [ 425.276372] [ 425.545435] __wait_on_freeing_inode+0x10f/0x350 [ 425.595525] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 425.747394] ? __pfx_var_wake_function+0x10/0x10 [ 425.749981] ? lock_is_held_type+0x9e/0x120 [ 425.752226] insert_inode_locked+0x25f/0x890 [ 425.755545] __ext4_new_inode+0x223d/0x4cd0 [ 425.760618] ? __pfx___ext4_new_inode+0x10/0x10 [ 425.763188] ? __pfx___dquot_initialize+0x10/0x10 [ 425.764805] ? __pfx_avc_has_perm+0x10/0x10 [ 425.768404] ext4_symlink+0x623/0xb40 [ 425.773059] ? __pfx_ext4_symlink+0x10/0x10 [ 425.775131] ? security_inode_permission+0x72/0xe0 [ 425.778510] vfs_symlink+0x44b/0x840 [ 425.781177] filename_symlinkat+0x158/0x440 [ 425.783493] ? __pfx_filename_symlinkat+0x10/0x10 [ 425.785076] ? strncpy_from_user+0x21b/0x2f0 [ 425.788934] __x64_sys_symlink+0x82/0x110 [ 425.790395] do_syscall_64+0xbf/0x420 [ 425.792086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.793170] RIP: 0033:0x7f2f0009d427 [ 425.793963] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 425.796854] RSP: 002b:00007ffe12a92988 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 425.798106] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2f0009d427 [ 425.799285] RDX: 00007ffe12a92a63 RSI: 00007f2f000f8022 RDI: 00007ffe12a92a50 [ 425.800470] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe12a92820 [ 425.801642] R10: 00007ffe12a926d7 R11: 0000000000000206 R12: 0000000000000001 [ 425.802904] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe12a92a50 [ 425.811336] [ 425.811817] irq event stamp: 277 [ 425.812344] hardirqs last enabled at (277): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 425.813992] hardirqs last disabled at (276): [] _raw_spin_lock_irqsave+0x53/0x60 [ 425.815580] softirqs last enabled at (272): [] kernel_fpu_end+0x59/0x70 [ 425.817133] softirqs last disabled at (270): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 425.818792] ---[ end trace 0000000000000000 ]--- 00:26:46 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:46 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:26:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:46 executing program 7: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3f) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x7, 0x400, 0x31, @loopback, @local, 0x10, 0x700, 0x9, 0x348e}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', r1, 0x29, 0x8, 0x0, 0x8, 0x0, @private2, @local, 0x80, 0x8, 0x459d, 0x15}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0), 0x42000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000840), 0xffffffffffffffff) 00:26:46 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x0, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0"}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(r0, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:46 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:46 executing program 4: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x42000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x5, 0x8db1, 0x25, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x8000, 0xfffff71f}}) 00:26:46 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) 00:26:46 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x100}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:46 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0x0, 0x0, 'client1\x00', 0x0, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x0, 0x3}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) 00:26:46 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x70000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x0, 0x3f, 0x28, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x5677, 0xff}}) 00:26:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x8001, 0x4, 0x8001, {0x3, 0x1}, 0x8001, 0xfffffe00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x0, 0xee00}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000140)={0xfffffffc, 0x2, 'client1\x00', 0xffffffff80000005, "fc6cdb3753131da7", "02fe2ef33f7d1a605c4f9c9adab88cdb32ec2ead54975ceba3d796f4ac48a6e0", 0x7, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) syz_genetlink_get_family_id$smc(&(0x7f00000006c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x3, &(0x7f0000000700)=[{0x169, 0x35, 0x3, 0x20}, {0x2, 0xa3, 0xff, 0x4}, {0x1ff, 0x4, 0x86, 0x46}]}) VM DIAGNOSIS: 00:26:38 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88806ce08938 R8 =0000000000000000 R9 =ffffed1001765046 R10=0000000000000031 R11=0000000041543c20 R12=0000000000000031 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555576a27400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe0600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2f0011d543 CR3=0000000044895000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88800947ed90 RBX=ffff888048d1fc40 RCX=ffffffff818f1d87 RDX=ffff888016fe1b80 RSI=ffffffff818f1d95 RDI=0000000000000001 RBP=ffffea000023fd00 RSP=ffff888048d1fb10 R8 =0000000000000000 R9 =fffff94000047fa0 R10=0000000000000001 R11=0000000000000000 R12=0000000000000012 R13=dffffc0000000000 R14=ffff88800947eb70 R15=ffff888048d1fd88 RIP=ffffffff818f1daf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcac7eb5540 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcac839a000 CR3=000000000d639000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000ff0000ff0000000000000000 XMM03=00000000000000000000000000000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000