Warning: Permanently added '[localhost]:21169' (ECDSA) to the list of known hosts. 2026/01/19 07:08:29 fuzzer started 2026/01/19 07:08:30 dialing manager at localhost:42157 syzkaller login: [ 49.565488] cgroup: Unknown subsys name 'net' [ 49.627113] cgroup: Unknown subsys name 'cpuset' [ 49.637275] cgroup: Unknown subsys name 'rlimit' 2026/01/19 07:08:41 syscalls: 203 2026/01/19 07:08:41 code coverage: enabled 2026/01/19 07:08:41 comparison tracing: enabled 2026/01/19 07:08:41 extra coverage: enabled 2026/01/19 07:08:41 setuid sandbox: enabled 2026/01/19 07:08:41 namespace sandbox: enabled 2026/01/19 07:08:41 Android sandbox: enabled 2026/01/19 07:08:41 fault injection: enabled 2026/01/19 07:08:41 leak checking: enabled 2026/01/19 07:08:41 net packet injection: enabled 2026/01/19 07:08:41 net device setup: enabled 2026/01/19 07:08:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/19 07:08:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/19 07:08:41 USB emulation: enabled 2026/01/19 07:08:41 hci packet injection: enabled 2026/01/19 07:08:41 wifi device emulation: enabled 2026/01/19 07:08:41 802.15.4 emulation: enabled 2026/01/19 07:08:41 fetching corpus: 0, signal 0/0 (executing program) 2026/01/19 07:08:42 starting 8 fuzzer processes 07:08:42 executing program 0: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x4f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa5}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x39, 0x17}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x44}}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) r5 = syz_open_dev$hiddev(&(0x7f0000000580), 0x1906, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67c027948d"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f75b80e81ca9843bdb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "633702b1b64e7393bb1fc1711069a3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000900)=0x3eac) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xac4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004080) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4094}, 0xc0) syz_usb_connect$uac1(0x5, 0xd9, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x1, 0xe0, 0x72, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9, "10"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x2], 0xaa}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x4, "420fd529e30c"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xa3, "62019fca44a7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x5, 0x5, 0x7, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc847, 0x7, 0xce, "87caefb3"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x5, 0x83}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0x7, {0x7, 0x25, 0x1, 0x81, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x22, 0x2, 0x3f, 0x7f, "f8cefc1db99386d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x80, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x2, 0x5, 0x5, 0x10, 0x9}, 0x46, &(0x7f0000000d00)={0x5, 0xf, 0x46, 0x6, [@generic={0x3, 0x10, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x20, 0x0, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0xc9, 0xf00, 0x8001, [0x30, 0x0, 0xffc0, 0xff00cf, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xb, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x2, 0x662}]}, 0x6, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x40a}}, {0xca, &(0x7f0000000e40)=@string={0xca, 0x3, "18bf8a268f9c29a8d2f27f70cdd86ca3b520a1dead8f5168295ea862df34e822a45904eac366e4c8b9444b3d06baf727b4a27f8979c2abb571bb67f5fe8d653fae3826f59e75a0e9904baa716daa9ffd2b098d1027a7a1517d52de83cd99ffe9ffb451cf547495ccb4f16a6eaf441417660ecd6709fc4c3a7939dcfdba6e5fe58fa75c458520f8ead0666880b30f0f91ea60cb3e3aaff97a4a7461c63457b9a72416ba446feedf33bc5a30819df62c2b8e8b13c8718d1278555d4ae3c7c17a32bbebdadedebc3e7b"}}, {0x15, &(0x7f0000000f40)=@string={0x15, 0x3, "8e0cf4636f8cc3e9c742cb92861369b9849d0a"}}, {0x4d, &(0x7f0000000f80)=@string={0x4d, 0x3, "61799d5e4740447b0842e80897a92718f09263ba11dbbcfbcdccffd48edd8c14774ebe975eb7502605bf1d528cf5596c16d38aaf8a086157fd62d104a3739e136cf9f060f85ac51b72bbc0"}}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) 07:08:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r8, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x1) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x84, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40800}, 0x84) 07:08:42 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r6, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000c40)=0x7, 0x4) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:08:42 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000440)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r7, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x44) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x378}}, './file0\x00'}) [ 60.381563] audit: type=1400 audit(1768806522.539:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:08:42 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x50}}, 0x404c000) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000280)={0x2, 0x200, 0x9}) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) accept4(r6, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000400)=0x80, 0x80000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:08:42 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r5, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r6, 0x4805, 0x0) r7 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x100, r5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, @in_args={0x1}}, './file0/file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) 07:08:42 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) write$P9_RREADDIR(r7, &(0x7f0000000280)={0xea, 0x29, 0x2, {0x7, [{{0x2, 0x2, 0x5}, 0xffffffffffff0001, 0x0, 0x7, './file1'}, {{0x0, 0x4, 0x2}, 0x3be6, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x60, 0xa, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0x8, 0x4, 0x4}, 0x7, 0xff, 0xd, './file0/file0'}, {{0x4, 0x3, 0x2}, 0x20, 0x1, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0x16d, 0x9, 0x7, './file0'}]}}, 0xea) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0x12}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0/file0\x00'}) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r9, {0xfc000000}}, './file1\x00'}) ioctl$HIDIOCGSTRING(r7, 0x81044804, &(0x7f0000000480)={0xce, "9de260999e627e88eabf74a4639e19145413b396429c44c3d1fcaf38bd5ff701bff61615e058924cb398897cba521192ccc4100a160b4a091f5bbe62b3cc232cab6d1a6b6d4a39685a863442ed1b13cdbd62f9b0a44b711d1b70e9c3ba7bb1a40df935c00a8ad8ce75e0565b6a82541d3d9c6077343ade008018666b315e42b13876a8813de2be8602277cf2ba57c646bca9a6d9c88ad329f43d16e986377355833ea00edae253a306e6a66be73c55f4211a9093c109f91b1e9624cba2945f5fac5478549e51a8a3625d11587713"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f00000005c0)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x9}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x5}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff6e3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4002812}, 0x800) 07:08:42 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r8 = accept4(r4, &(0x7f0000000500)=@l2={0x1f, 0x0, @none}, &(0x7f0000000580)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r7, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r9, {0x6}}, './file1\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r10) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x80800) [ 61.652399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.654391] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.659377] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.660577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.661389] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.663507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.669562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.671150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.673127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.675980] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.679750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.691374] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.696895] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.703535] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.708793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.787568] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.789178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.789243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.795800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.797852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.798871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.800267] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.800654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.809753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.817531] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.858691] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.888861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.897549] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.897841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.898973] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.901095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.904704] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.908538] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.909600] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.916670] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.939659] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.962637] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.964511] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.965704] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.018792] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.743467] Bluetooth: hci2: command tx timeout [ 63.744004] Bluetooth: hci1: command tx timeout [ 63.744593] Bluetooth: hci0: command tx timeout [ 63.870564] Bluetooth: hci3: command tx timeout [ 63.874220] Bluetooth: hci4: command tx timeout [ 63.934481] Bluetooth: hci5: command tx timeout [ 64.064376] Bluetooth: hci6: command tx timeout [ 64.128484] Bluetooth: hci7: command tx timeout [ 65.791472] Bluetooth: hci0: command tx timeout [ 65.791596] Bluetooth: hci1: command tx timeout [ 65.791905] Bluetooth: hci2: command tx timeout [ 65.918525] Bluetooth: hci4: command tx timeout [ 65.918936] Bluetooth: hci3: command tx timeout [ 65.982477] Bluetooth: hci5: command tx timeout [ 66.110531] Bluetooth: hci6: command tx timeout [ 66.174485] Bluetooth: hci7: command tx timeout [ 67.839802] Bluetooth: hci1: command tx timeout [ 67.840494] Bluetooth: hci0: command tx timeout [ 67.840975] Bluetooth: hci2: command tx timeout [ 67.967473] Bluetooth: hci4: command tx timeout [ 67.967505] Bluetooth: hci3: command tx timeout [ 68.030505] Bluetooth: hci5: command tx timeout [ 68.158491] Bluetooth: hci6: command tx timeout [ 68.223439] Bluetooth: hci7: command tx timeout [ 69.886525] Bluetooth: hci1: command tx timeout [ 69.886956] Bluetooth: hci2: command tx timeout [ 69.887315] Bluetooth: hci0: command tx timeout [ 70.014510] Bluetooth: hci3: command tx timeout [ 70.015457] Bluetooth: hci4: command tx timeout [ 70.078584] Bluetooth: hci5: command tx timeout [ 70.207440] Bluetooth: hci6: command tx timeout [ 70.271545] Bluetooth: hci7: command tx timeout [ 97.187150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.188519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.377012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.377678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.501803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.502996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.597698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.598362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.720479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.721120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.841011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.841674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:09:20 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r6, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000c40)=0x7, 0x4) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) [ 98.232570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.233224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:09:20 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) write$P9_RREADDIR(r7, &(0x7f0000000280)={0xea, 0x29, 0x2, {0x7, [{{0x2, 0x2, 0x5}, 0xffffffffffff0001, 0x0, 0x7, './file1'}, {{0x0, 0x4, 0x2}, 0x3be6, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x60, 0xa, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0x8, 0x4, 0x4}, 0x7, 0xff, 0xd, './file0/file0'}, {{0x4, 0x3, 0x2}, 0x20, 0x1, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0x16d, 0x9, 0x7, './file0'}]}}, 0xea) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0x12}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0/file0\x00'}) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r9, {0xfc000000}}, './file1\x00'}) ioctl$HIDIOCGSTRING(r7, 0x81044804, &(0x7f0000000480)={0xce, "9de260999e627e88eabf74a4639e19145413b396429c44c3d1fcaf38bd5ff701bff61615e058924cb398897cba521192ccc4100a160b4a091f5bbe62b3cc232cab6d1a6b6d4a39685a863442ed1b13cdbd62f9b0a44b711d1b70e9c3ba7bb1a40df935c00a8ad8ce75e0565b6a82541d3d9c6077343ade008018666b315e42b13876a8813de2be8602277cf2ba57c646bca9a6d9c88ad329f43d16e986377355833ea00edae253a306e6a66be73c55f4211a9093c109f91b1e9624cba2945f5fac5478549e51a8a3625d11587713"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f00000005c0)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x9}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x5}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff6e3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4002812}, 0x800) [ 98.261088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.262072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:09:20 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r6, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000c40)=0x7, 0x4) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:09:20 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) write$P9_RREADDIR(r7, &(0x7f0000000280)={0xea, 0x29, 0x2, {0x7, [{{0x2, 0x2, 0x5}, 0xffffffffffff0001, 0x0, 0x7, './file1'}, {{0x0, 0x4, 0x2}, 0x3be6, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x60, 0xa, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0x8, 0x4, 0x4}, 0x7, 0xff, 0xd, './file0/file0'}, {{0x4, 0x3, 0x2}, 0x20, 0x1, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0x16d, 0x9, 0x7, './file0'}]}}, 0xea) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0x12}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0/file0\x00'}) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r9, {0xfc000000}}, './file1\x00'}) ioctl$HIDIOCGSTRING(r7, 0x81044804, &(0x7f0000000480)={0xce, "9de260999e627e88eabf74a4639e19145413b396429c44c3d1fcaf38bd5ff701bff61615e058924cb398897cba521192ccc4100a160b4a091f5bbe62b3cc232cab6d1a6b6d4a39685a863442ed1b13cdbd62f9b0a44b711d1b70e9c3ba7bb1a40df935c00a8ad8ce75e0565b6a82541d3d9c6077343ade008018666b315e42b13876a8813de2be8602277cf2ba57c646bca9a6d9c88ad329f43d16e986377355833ea00edae253a306e6a66be73c55f4211a9093c109f91b1e9624cba2945f5fac5478549e51a8a3625d11587713"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f00000005c0)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x9}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x5}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff6e3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4002812}, 0x800) [ 98.337350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.337970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:09:20 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r6, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000c40)=0x7, 0x4) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:09:20 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) write$P9_RREADDIR(r7, &(0x7f0000000280)={0xea, 0x29, 0x2, {0x7, [{{0x2, 0x2, 0x5}, 0xffffffffffff0001, 0x0, 0x7, './file1'}, {{0x0, 0x4, 0x2}, 0x3be6, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x60, 0xa, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0x8, 0x4, 0x4}, 0x7, 0xff, 0xd, './file0/file0'}, {{0x4, 0x3, 0x2}, 0x20, 0x1, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0x16d, 0x9, 0x7, './file0'}]}}, 0xea) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0x12}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0/file0\x00'}) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r9, {0xfc000000}}, './file1\x00'}) ioctl$HIDIOCGSTRING(r7, 0x81044804, &(0x7f0000000480)={0xce, "9de260999e627e88eabf74a4639e19145413b396429c44c3d1fcaf38bd5ff701bff61615e058924cb398897cba521192ccc4100a160b4a091f5bbe62b3cc232cab6d1a6b6d4a39685a863442ed1b13cdbd62f9b0a44b711d1b70e9c3ba7bb1a40df935c00a8ad8ce75e0565b6a82541d3d9c6077343ade008018666b315e42b13876a8813de2be8602277cf2ba57c646bca9a6d9c88ad329f43d16e986377355833ea00edae253a306e6a66be73c55f4211a9093c109f91b1e9624cba2945f5fac5478549e51a8a3625d11587713"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f00000005c0)) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x9}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x5}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff6e3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4002812}, 0x800) 07:09:20 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r6, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000c40)=0x7, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) [ 98.441748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.442377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:09:20 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r6, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000c40)=0x7, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) [ 98.497184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.497926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.536202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.536904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.604687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.605338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.611554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.612252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.673241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.673966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.691791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.692435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.780720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.782071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.000858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.001819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:09:33 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) write$P9_RREADDIR(r7, &(0x7f0000000280)={0xea, 0x29, 0x2, {0x7, [{{0x2, 0x2, 0x5}, 0xffffffffffff0001, 0x0, 0x7, './file1'}, {{0x0, 0x4, 0x2}, 0x3be6, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x60, 0xa, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0x8, 0x4, 0x4}, 0x7, 0xff, 0xd, './file0/file0'}, {{0x4, 0x3, 0x2}, 0x20, 0x1, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0x16d, 0x9, 0x7, './file0'}]}}, 0xea) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0x12}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0/file0\x00'}) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r9, {0xfc000000}}, './file1\x00'}) ioctl$HIDIOCGSTRING(r7, 0x81044804, &(0x7f0000000480)={0xce, "9de260999e627e88eabf74a4639e19145413b396429c44c3d1fcaf38bd5ff701bff61615e058924cb398897cba521192ccc4100a160b4a091f5bbe62b3cc232cab6d1a6b6d4a39685a863442ed1b13cdbd62f9b0a44b711d1b70e9c3ba7bb1a40df935c00a8ad8ce75e0565b6a82541d3d9c6077343ade008018666b315e42b13876a8813de2be8602277cf2ba57c646bca9a6d9c88ad329f43d16e986377355833ea00edae253a306e6a66be73c55f4211a9093c109f91b1e9624cba2945f5fac5478549e51a8a3625d11587713"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f00000005c0)) 07:09:33 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r5, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r6, 0x4805, 0x0) r7 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x100, r5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, @in_args={0x1}}, './file0/file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) 07:09:33 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r6, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000c40)=0x7, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:09:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r8, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x1) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x84, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40800}, 0x84) 07:09:33 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r8 = accept4(r4, &(0x7f0000000500)=@l2={0x1f, 0x0, @none}, &(0x7f0000000580)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r7, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r9, {0x6}}, './file1\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r10) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x80800) 07:09:33 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000440)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r7, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x44) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x378}}, './file0\x00'}) 07:09:33 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x50}}, 0x404c000) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000280)={0x2, 0x200, 0x9}) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) accept4(r6, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000400)=0x80, 0x80000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:09:33 executing program 0: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x4f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa5}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x39, 0x17}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x44}}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) r5 = syz_open_dev$hiddev(&(0x7f0000000580), 0x1906, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67c027948d"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f75b80e81ca9843bdb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "633702b1b64e7393bb1fc1711069a3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000900)=0x3eac) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xac4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004080) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4094}, 0xc0) syz_usb_connect$uac1(0x5, 0xd9, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x1, 0xe0, 0x72, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9, "10"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x2], 0xaa}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x4, "420fd529e30c"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xa3, "62019fca44a7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x5, 0x5, 0x7, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc847, 0x7, 0xce, "87caefb3"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x5, 0x83}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0x7, {0x7, 0x25, 0x1, 0x81, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x22, 0x2, 0x3f, 0x7f, "f8cefc1db99386d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x80, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x2, 0x5, 0x5, 0x10, 0x9}, 0x46, &(0x7f0000000d00)={0x5, 0xf, 0x46, 0x6, [@generic={0x3, 0x10, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x20, 0x0, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0xc9, 0xf00, 0x8001, [0x30, 0x0, 0xffc0, 0xff00cf, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xb, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x2, 0x662}]}, 0x6, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x40a}}, {0xca, &(0x7f0000000e40)=@string={0xca, 0x3, "18bf8a268f9c29a8d2f27f70cdd86ca3b520a1dead8f5168295ea862df34e822a45904eac366e4c8b9444b3d06baf727b4a27f8979c2abb571bb67f5fe8d653fae3826f59e75a0e9904baa716daa9ffd2b098d1027a7a1517d52de83cd99ffe9ffb451cf547495ccb4f16a6eaf441417660ecd6709fc4c3a7939dcfdba6e5fe58fa75c458520f8ead0666880b30f0f91ea60cb3e3aaff97a4a7461c63457b9a72416ba446feedf33bc5a30819df62c2b8e8b13c8718d1278555d4ae3c7c17a32bbebdadedebc3e7b"}}, {0x15, &(0x7f0000000f40)=@string={0x15, 0x3, "8e0cf4636f8cc3e9c742cb92861369b9849d0a"}}, {0x4d, &(0x7f0000000f80)=@string={0x4d, 0x3, "61799d5e4740447b0842e80897a92718f09263ba11dbbcfbcdccffd48edd8c14774ebe975eb7502605bf1d528cf5596c16d38aaf8a086157fd62d104a3739e136cf9f060f85ac51b72bbc0"}}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) 07:09:33 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000440)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r7, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x44) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x378}}, './file0\x00'}) 07:09:33 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x50}}, 0x404c000) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000280)={0x2, 0x200, 0x9}) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) accept4(r6, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000400)=0x80, 0x80000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:09:33 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r6, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) [ 111.837649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.851969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:09:42 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r5, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r6, 0x4805, 0x0) r7 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x100, r5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, @in_args={0x1}}, './file0/file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) 07:09:42 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) write$P9_RREADDIR(r7, &(0x7f0000000280)={0xea, 0x29, 0x2, {0x7, [{{0x2, 0x2, 0x5}, 0xffffffffffff0001, 0x0, 0x7, './file1'}, {{0x0, 0x4, 0x2}, 0x3be6, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x60, 0xa, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0x8, 0x4, 0x4}, 0x7, 0xff, 0xd, './file0/file0'}, {{0x4, 0x3, 0x2}, 0x20, 0x1, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0x16d, 0x9, 0x7, './file0'}]}}, 0xea) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0x12}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0/file0\x00'}) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r9, {0xfc000000}}, './file1\x00'}) ioctl$HIDIOCGSTRING(r7, 0x81044804, &(0x7f0000000480)={0xce, "9de260999e627e88eabf74a4639e19145413b396429c44c3d1fcaf38bd5ff701bff61615e058924cb398897cba521192ccc4100a160b4a091f5bbe62b3cc232cab6d1a6b6d4a39685a863442ed1b13cdbd62f9b0a44b711d1b70e9c3ba7bb1a40df935c00a8ad8ce75e0565b6a82541d3d9c6077343ade008018666b315e42b13876a8813de2be8602277cf2ba57c646bca9a6d9c88ad329f43d16e986377355833ea00edae253a306e6a66be73c55f4211a9093c109f91b1e9624cba2945f5fac5478549e51a8a3625d11587713"}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r9, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) 07:09:42 executing program 0: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x4f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa5}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x39, 0x17}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x44}}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) r5 = syz_open_dev$hiddev(&(0x7f0000000580), 0x1906, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67c027948d"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f75b80e81ca9843bdb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "633702b1b64e7393bb1fc1711069a3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000900)=0x3eac) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xac4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004080) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4094}, 0xc0) syz_usb_connect$uac1(0x5, 0xd9, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x1, 0xe0, 0x72, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9, "10"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x2], 0xaa}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x4, "420fd529e30c"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xa3, "62019fca44a7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x5, 0x5, 0x7, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc847, 0x7, 0xce, "87caefb3"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x5, 0x83}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0x7, {0x7, 0x25, 0x1, 0x81, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x22, 0x2, 0x3f, 0x7f, "f8cefc1db99386d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x80, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x2, 0x5, 0x5, 0x10, 0x9}, 0x46, &(0x7f0000000d00)={0x5, 0xf, 0x46, 0x6, [@generic={0x3, 0x10, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x20, 0x0, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0xc9, 0xf00, 0x8001, [0x30, 0x0, 0xffc0, 0xff00cf, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xb, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x2, 0x662}]}, 0x6, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x40a}}, {0xca, &(0x7f0000000e40)=@string={0xca, 0x3, "18bf8a268f9c29a8d2f27f70cdd86ca3b520a1dead8f5168295ea862df34e822a45904eac366e4c8b9444b3d06baf727b4a27f8979c2abb571bb67f5fe8d653fae3826f59e75a0e9904baa716daa9ffd2b098d1027a7a1517d52de83cd99ffe9ffb451cf547495ccb4f16a6eaf441417660ecd6709fc4c3a7939dcfdba6e5fe58fa75c458520f8ead0666880b30f0f91ea60cb3e3aaff97a4a7461c63457b9a72416ba446feedf33bc5a30819df62c2b8e8b13c8718d1278555d4ae3c7c17a32bbebdadedebc3e7b"}}, {0x15, &(0x7f0000000f40)=@string={0x15, 0x3, "8e0cf4636f8cc3e9c742cb92861369b9849d0a"}}, {0x4d, &(0x7f0000000f80)=@string={0x4d, 0x3, "61799d5e4740447b0842e80897a92718f09263ba11dbbcfbcdccffd48edd8c14774ebe975eb7502605bf1d528cf5596c16d38aaf8a086157fd62d104a3739e136cf9f060f85ac51b72bbc0"}}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) 07:09:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r8, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x1) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x84, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40800}, 0x84) 07:09:42 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r6, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:09:42 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000440)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r7, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x44) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x378}}, './file0\x00'}) 07:09:42 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x50}}, 0x404c000) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000280)={0x2, 0x200, 0x9}) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) accept4(r6, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000400)=0x80, 0x80000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:09:42 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r8 = accept4(r4, &(0x7f0000000500)=@l2={0x1f, 0x0, @none}, &(0x7f0000000580)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r7, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r9, {0x6}}, './file1\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r10) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x80800) 07:09:42 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r6, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:09:42 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r5, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r6, 0x4805, 0x0) r7 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x100, r5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, @in_args={0x1}}, './file0/file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) 07:09:42 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) write$P9_RREADDIR(r6, &(0x7f0000000280)={0xea, 0x29, 0x2, {0x7, [{{0x2, 0x2, 0x5}, 0xffffffffffff0001, 0x0, 0x7, './file1'}, {{0x0, 0x4, 0x2}, 0x3be6, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x60, 0xa, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0x8, 0x4, 0x4}, 0x7, 0xff, 0xd, './file0/file0'}, {{0x4, 0x3, 0x2}, 0x20, 0x1, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0x16d, 0x9, 0x7, './file0'}]}}, 0xea) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0x12}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r7, {0x5}}, './file0/file0\x00'}) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r8, {0xfc000000}}, './file1\x00'}) ioctl$HIDIOCGSTRING(r6, 0x81044804, &(0x7f0000000480)={0xce, "9de260999e627e88eabf74a4639e19145413b396429c44c3d1fcaf38bd5ff701bff61615e058924cb398897cba521192ccc4100a160b4a091f5bbe62b3cc232cab6d1a6b6d4a39685a863442ed1b13cdbd62f9b0a44b711d1b70e9c3ba7bb1a40df935c00a8ad8ce75e0565b6a82541d3d9c6077343ade008018666b315e42b13876a8813de2be8602277cf2ba57c646bca9a6d9c88ad329f43d16e986377355833ea00edae253a306e6a66be73c55f4211a9093c109f91b1e9624cba2945f5fac5478549e51a8a3625d11587713"}) [ 120.452052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.454330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:09:51 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r6, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:09:51 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000440)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r7, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x44) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 07:09:51 executing program 0: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x4f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa5}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x39, 0x17}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x44}}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) r5 = syz_open_dev$hiddev(&(0x7f0000000580), 0x1906, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67c027948d"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f75b80e81ca9843bdb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "633702b1b64e7393bb1fc1711069a3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000900)=0x3eac) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xac4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004080) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4094}, 0xc0) syz_usb_connect$uac1(0x5, 0xd9, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x1, 0xe0, 0x72, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9, "10"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x2], 0xaa}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x4, "420fd529e30c"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xa3, "62019fca44a7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x5, 0x5, 0x7, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc847, 0x7, 0xce, "87caefb3"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x5, 0x83}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0x7, {0x7, 0x25, 0x1, 0x81, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x22, 0x2, 0x3f, 0x7f, "f8cefc1db99386d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x80, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x2, 0x5, 0x5, 0x10, 0x9}, 0x46, &(0x7f0000000d00)={0x5, 0xf, 0x46, 0x6, [@generic={0x3, 0x10, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x20, 0x0, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0xc9, 0xf00, 0x8001, [0x30, 0x0, 0xffc0, 0xff00cf, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xb, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x2, 0x662}]}, 0x6, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x40a}}, {0xca, &(0x7f0000000e40)=@string={0xca, 0x3, "18bf8a268f9c29a8d2f27f70cdd86ca3b520a1dead8f5168295ea862df34e822a45904eac366e4c8b9444b3d06baf727b4a27f8979c2abb571bb67f5fe8d653fae3826f59e75a0e9904baa716daa9ffd2b098d1027a7a1517d52de83cd99ffe9ffb451cf547495ccb4f16a6eaf441417660ecd6709fc4c3a7939dcfdba6e5fe58fa75c458520f8ead0666880b30f0f91ea60cb3e3aaff97a4a7461c63457b9a72416ba446feedf33bc5a30819df62c2b8e8b13c8718d1278555d4ae3c7c17a32bbebdadedebc3e7b"}}, {0x15, &(0x7f0000000f40)=@string={0x15, 0x3, "8e0cf4636f8cc3e9c742cb92861369b9849d0a"}}, {0x4d, &(0x7f0000000f80)=@string={0x4d, 0x3, "61799d5e4740447b0842e80897a92718f09263ba11dbbcfbcdccffd48edd8c14774ebe975eb7502605bf1d528cf5596c16d38aaf8a086157fd62d104a3739e136cf9f060f85ac51b72bbc0"}}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) 07:09:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r8, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x1) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x84, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40800}, 0x84) 07:09:51 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) write$P9_RREADDIR(r6, &(0x7f0000000280)={0xea, 0x29, 0x2, {0x7, [{{0x2, 0x2, 0x5}, 0xffffffffffff0001, 0x0, 0x7, './file1'}, {{0x0, 0x4, 0x2}, 0x3be6, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x60, 0xa, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0x8, 0x4, 0x4}, 0x7, 0xff, 0xd, './file0/file0'}, {{0x4, 0x3, 0x2}, 0x20, 0x1, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0x16d, 0x9, 0x7, './file0'}]}}, 0xea) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0x12}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r7, {0x5}}, './file0/file0\x00'}) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r8, {0xfc000000}}, './file1\x00'}) 07:09:51 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r8 = accept4(r4, &(0x7f0000000500)=@l2={0x1f, 0x0, @none}, &(0x7f0000000580)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r7, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r9, {0x6}}, './file1\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r10) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x80800) 07:09:51 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r5, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r6, 0x4805, 0x0) r7 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x100, r5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, @in_args={0x1}}, './file0/file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 07:09:51 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x50}}, 0x404c000) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000280)={0x2, 0x200, 0x9}) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:09:51 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$P9_RREADDIR(r5, &(0x7f0000000280)={0xea, 0x29, 0x2, {0x7, [{{0x2, 0x2, 0x5}, 0xffffffffffff0001, 0x0, 0x7, './file1'}, {{0x0, 0x4, 0x2}, 0x3be6, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x60, 0xa, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0x8, 0x4, 0x4}, 0x7, 0xff, 0xd, './file0/file0'}, {{0x4, 0x3, 0x2}, 0x20, 0x1, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0x16d, 0x9, 0x7, './file0'}]}}, 0xea) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x12}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0/file0\x00'}) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000400)) 07:09:51 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) socket$netlink(0x10, 0x3, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:09:51 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x50}}, 0x404c000) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000280)={0x2, 0x200, 0x9}) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:09:51 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r8 = accept4(r4, &(0x7f0000000500)=@l2={0x1f, 0x0, @none}, &(0x7f0000000580)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r7, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r9, {0x6}}, './file1\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r10) 07:09:51 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000440)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r6, 0x8, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x44) 07:09:51 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$P9_RREADDIR(r5, &(0x7f0000000280)={0xea, 0x29, 0x2, {0x7, [{{0x2, 0x2, 0x5}, 0xffffffffffff0001, 0x0, 0x7, './file1'}, {{0x0, 0x4, 0x2}, 0x3be6, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x60, 0xa, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0x8, 0x4, 0x4}, 0x7, 0xff, 0xd, './file0/file0'}, {{0x4, 0x3, 0x2}, 0x20, 0x1, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0x16d, 0x9, 0x7, './file0'}]}}, 0xea) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x12}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0/file0\x00'}) 07:09:51 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x118, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xcc, 0x8, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x401}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x20040005) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:09:51 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$P9_RREADDIR(r5, &(0x7f0000000280)={0xea, 0x29, 0x2, {0x7, [{{0x2, 0x2, 0x5}, 0xffffffffffff0001, 0x0, 0x7, './file1'}, {{0x0, 0x4, 0x2}, 0x3be6, 0x1, 0x7, './file0'}, {{0x40, 0x4, 0x7}, 0x60, 0xa, 0x7, './file0'}, {{0x0, 0x4, 0x6}, 0x7, 0x5, 0x7, './file0'}, {{0x8, 0x4, 0x4}, 0x7, 0xff, 0xd, './file0/file0'}, {{0x4, 0x3, 0x2}, 0x20, 0x1, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0x16d, 0x9, 0x7, './file0'}]}}, 0xea) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x12}}, './file1\x00'}) 07:09:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r8, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x1) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) [ 129.315447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.329835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:10:00 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:00 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x50}}, 0x404c000) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000280)={0x2, 0x200, 0x9}) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:00 executing program 0: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x4f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa5}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x39, 0x17}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x44}}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) r5 = syz_open_dev$hiddev(&(0x7f0000000580), 0x1906, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67c027948d"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f75b80e81ca9843bdb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "633702b1b64e7393bb1fc1711069a3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000900)=0x3eac) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xac4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004080) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4094}, 0xc0) syz_usb_connect$uac1(0x5, 0xd9, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x1, 0xe0, 0x72, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9, "10"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x2], 0xaa}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x4, "420fd529e30c"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xa3, "62019fca44a7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x5, 0x5, 0x7, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc847, 0x7, 0xce, "87caefb3"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x5, 0x83}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0x7, {0x7, 0x25, 0x1, 0x81, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x22, 0x2, 0x3f, 0x7f, "f8cefc1db99386d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x80, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x2, 0x5, 0x5, 0x10, 0x9}, 0x46, &(0x7f0000000d00)={0x5, 0xf, 0x46, 0x6, [@generic={0x3, 0x10, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x20, 0x0, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0xc9, 0xf00, 0x8001, [0x30, 0x0, 0xffc0, 0xff00cf, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xb, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x2, 0x662}]}, 0x6, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x40a}}, {0xca, &(0x7f0000000e40)=@string={0xca, 0x3, "18bf8a268f9c29a8d2f27f70cdd86ca3b520a1dead8f5168295ea862df34e822a45904eac366e4c8b9444b3d06baf727b4a27f8979c2abb571bb67f5fe8d653fae3826f59e75a0e9904baa716daa9ffd2b098d1027a7a1517d52de83cd99ffe9ffb451cf547495ccb4f16a6eaf441417660ecd6709fc4c3a7939dcfdba6e5fe58fa75c458520f8ead0666880b30f0f91ea60cb3e3aaff97a4a7461c63457b9a72416ba446feedf33bc5a30819df62c2b8e8b13c8718d1278555d4ae3c7c17a32bbebdadedebc3e7b"}}, {0x15, &(0x7f0000000f40)=@string={0x15, 0x3, "8e0cf4636f8cc3e9c742cb92861369b9849d0a"}}, {0x4d, &(0x7f0000000f80)=@string={0x4d, 0x3, "61799d5e4740447b0842e80897a92718f09263ba11dbbcfbcdccffd48edd8c14774ebe975eb7502605bf1d528cf5596c16d38aaf8a086157fd62d104a3739e136cf9f060f85ac51b72bbc0"}}]}) 07:10:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r8, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x1) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) 07:10:00 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r5, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r6, 0x4805, 0x0) r7 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x100, r5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, @in_args={0x1}}, './file0/file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 07:10:00 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000440)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:00 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x12}}, './file1\x00'}) 07:10:00 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r8 = accept4(r4, &(0x7f0000000500)=@l2={0x1f, 0x0, @none}, &(0x7f0000000580)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r7, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r9, {0x6}}, './file1\x00'}) 07:10:00 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x50}}, 0x404c000) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000280)={0x2, 0x200, 0x9}) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:00 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x12}}, './file1\x00'}) 07:10:00 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000880)=0x69) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:00 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000440)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:00 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r8 = accept4(r4, &(0x7f0000000500)=@l2={0x1f, 0x0, @none}, &(0x7f0000000580)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r7, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r9, {0x6}}, './file1\x00'}) 07:10:00 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x50}}, 0x404c000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r8, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x1) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) [ 138.818104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.819219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:10:01 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r5 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r5, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r6, 0x4805, 0x0) r7 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r7, 0x100, r5) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r4, @in_args={0x1}}, './file0/file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 07:10:09 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x280100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x12}}, './file1\x00'}) 07:10:09 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000440)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:09 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:09 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r8 = accept4(r4, &(0x7f0000000500)=@l2={0x1f, 0x0, @none}, &(0x7f0000000580)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r7, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000740)={{0x1, 0x1, 0x18, r9, {0x6}}, './file1\x00'}) 07:10:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r8, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x1) 07:10:09 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r4, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) r6 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r6, 0x100, r4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0/file0\x00'}) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) 07:10:09 executing program 0: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x4f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa5}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x39, 0x17}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x44}}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) r5 = syz_open_dev$hiddev(&(0x7f0000000580), 0x1906, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67c027948d"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f75b80e81ca9843bdb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "633702b1b64e7393bb1fc1711069a3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000900)=0x3eac) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xac4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004080) syz_usb_connect$uac1(0x5, 0xd9, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x1, 0xe0, 0x72, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9, "10"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x2], 0xaa}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x4, "420fd529e30c"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xa3, "62019fca44a7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x5, 0x5, 0x7, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc847, 0x7, 0xce, "87caefb3"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x5, 0x83}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0x7, {0x7, 0x25, 0x1, 0x81, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x22, 0x2, 0x3f, 0x7f, "f8cefc1db99386d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x80, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x2, 0x5, 0x5, 0x10, 0x9}, 0x46, &(0x7f0000000d00)={0x5, 0xf, 0x46, 0x6, [@generic={0x3, 0x10, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x20, 0x0, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0xc9, 0xf00, 0x8001, [0x30, 0x0, 0xffc0, 0xff00cf, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xb, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x2, 0x662}]}, 0x6, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x40a}}, {0xca, &(0x7f0000000e40)=@string={0xca, 0x3, "18bf8a268f9c29a8d2f27f70cdd86ca3b520a1dead8f5168295ea862df34e822a45904eac366e4c8b9444b3d06baf727b4a27f8979c2abb571bb67f5fe8d653fae3826f59e75a0e9904baa716daa9ffd2b098d1027a7a1517d52de83cd99ffe9ffb451cf547495ccb4f16a6eaf441417660ecd6709fc4c3a7939dcfdba6e5fe58fa75c458520f8ead0666880b30f0f91ea60cb3e3aaff97a4a7461c63457b9a72416ba446feedf33bc5a30819df62c2b8e8b13c8718d1278555d4ae3c7c17a32bbebdadedebc3e7b"}}, {0x15, &(0x7f0000000f40)=@string={0x15, 0x3, "8e0cf4636f8cc3e9c742cb92861369b9849d0a"}}, {0x4d, &(0x7f0000000f80)=@string={0x4d, 0x3, "61799d5e4740447b0842e80897a92718f09263ba11dbbcfbcdccffd48edd8c14774ebe975eb7502605bf1d528cf5596c16d38aaf8a086157fd62d104a3739e136cf9f060f85ac51b72bbc0"}}]}) 07:10:09 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:09 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r8 = accept4(r4, &(0x7f0000000500)=@l2={0x1f, 0x0, @none}, &(0x7f0000000580)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r7, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x22}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) 07:10:09 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000440)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:09 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r4, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) r6 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r6, 0x100, r4) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) 07:10:09 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r4, {0x12}}, './file1\x00'}) 07:10:09 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:09 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r2 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:09 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r8 = accept4(r4, &(0x7f0000000500)=@l2={0x1f, 0x0, @none}, &(0x7f0000000580)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r8, {0x5}}, './file1\x00'}) [ 147.254577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.256291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:10:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r8, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x1) 07:10:17 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:17 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x12}}, './file1\x00'}) 07:10:17 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r1 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000006c0)={0x2, 0xffffffff, 0x7fffffff, 0x3, 0x42, 0x4}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:17 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r4, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) r6 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r6, 0x100, r4) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) 07:10:17 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) accept4(r4, &(0x7f0000000500)=@l2={0x1f, 0x0, @none}, &(0x7f0000000580)=0x80, 0x80800) 07:10:17 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:17 executing program 0: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x4f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa5}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x39, 0x17}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x44}}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) r5 = syz_open_dev$hiddev(&(0x7f0000000580), 0x1906, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67c027948d"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f75b80e81ca9843bdb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "633702b1b64e7393bb1fc1711069a3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000900)=0x3eac) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xac4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004080) syz_usb_connect$uac1(0x5, 0xd9, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x1, 0xe0, 0x72, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9, "10"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x2], 0xaa}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x4, "420fd529e30c"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xa3, "62019fca44a7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x5, 0x5, 0x7, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc847, 0x7, 0xce, "87caefb3"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x5, 0x83}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0x7, {0x7, 0x25, 0x1, 0x81, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x22, 0x2, 0x3f, 0x7f, "f8cefc1db99386d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x80, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x2, 0x5, 0x5, 0x10, 0x9}, 0x46, &(0x7f0000000d00)={0x5, 0xf, 0x46, 0x6, [@generic={0x3, 0x10, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x20, 0x0, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0xc9, 0xf00, 0x8001, [0x30, 0x0, 0xffc0, 0xff00cf, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xb, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x2, 0x662}]}, 0x6, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x40a}}, {0xca, &(0x7f0000000e40)=@string={0xca, 0x3, "18bf8a268f9c29a8d2f27f70cdd86ca3b520a1dead8f5168295ea862df34e822a45904eac366e4c8b9444b3d06baf727b4a27f8979c2abb571bb67f5fe8d653fae3826f59e75a0e9904baa716daa9ffd2b098d1027a7a1517d52de83cd99ffe9ffb451cf547495ccb4f16a6eaf441417660ecd6709fc4c3a7939dcfdba6e5fe58fa75c458520f8ead0666880b30f0f91ea60cb3e3aaff97a4a7461c63457b9a72416ba446feedf33bc5a30819df62c2b8e8b13c8718d1278555d4ae3c7c17a32bbebdadedebc3e7b"}}, {0x15, &(0x7f0000000f40)=@string={0x15, 0x3, "8e0cf4636f8cc3e9c742cb92861369b9849d0a"}}, {0x4d, &(0x7f0000000f80)=@string={0x4d, 0x3, "61799d5e4740447b0842e80897a92718f09263ba11dbbcfbcdccffd48edd8c14774ebe975eb7502605bf1d528cf5596c16d38aaf8a086157fd62d104a3739e136cf9f060f85ac51b72bbc0"}}]}) 07:10:17 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r7, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x1a}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) 07:10:17 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:17 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x12}}, './file1\x00'}) 07:10:17 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r1 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000640)={0x0, 0x3, 0x84, 0x8, @buffer={0x0, 0xdc, &(0x7f00000003c0)=""/220}, &(0x7f00000004c0)="b60649c3a466be2f97c602c7da37b0cd6ad8953b55e80a2acd460e3574229108f047a49b699492824a8b0aafc2ba83a841a1b8b094c5822d272db1ade8695bb8a7733a6932ff4358eb1f60ee675655873f99ad73b29ef303f01b1fc1bca505a61a04923046337580137d1a19c9fb96b9fe6c39e3fdaa85e01b005c59bb1094212a77cebb", &(0x7f0000000580)=""/74, 0x10001, 0x0, 0x2, &(0x7f0000000600)}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:17 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:17 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r4, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) r6 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r6, 0x100, r4) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) 07:10:17 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) ioprio_set$uid(0x3, 0x0, 0x4004) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:17 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) [ 155.748822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.752582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:10:26 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x12}}, './file1\x00'}) 07:10:26 executing program 0: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x4f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa5}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x39, 0x17}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x44}}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) r5 = syz_open_dev$hiddev(&(0x7f0000000580), 0x1906, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67c027948d"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f75b80e81ca9843bdb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "633702b1b64e7393bb1fc1711069a3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000900)=0x3eac) syz_usb_connect$uac1(0x5, 0xd9, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x1, 0xe0, 0x72, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9, "10"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x2], 0xaa}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x4, "420fd529e30c"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xa3, "62019fca44a7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x5, 0x5, 0x7, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc847, 0x7, 0xce, "87caefb3"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x5, 0x83}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0x7, {0x7, 0x25, 0x1, 0x81, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x22, 0x2, 0x3f, 0x7f, "f8cefc1db99386d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x80, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x2, 0x5, 0x5, 0x10, 0x9}, 0x46, &(0x7f0000000d00)={0x5, 0xf, 0x46, 0x6, [@generic={0x3, 0x10, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x20, 0x0, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0xc9, 0xf00, 0x8001, [0x30, 0x0, 0xffc0, 0xff00cf, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xb, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x2, 0x662}]}, 0x6, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x40a}}, {0xca, &(0x7f0000000e40)=@string={0xca, 0x3, "18bf8a268f9c29a8d2f27f70cdd86ca3b520a1dead8f5168295ea862df34e822a45904eac366e4c8b9444b3d06baf727b4a27f8979c2abb571bb67f5fe8d653fae3826f59e75a0e9904baa716daa9ffd2b098d1027a7a1517d52de83cd99ffe9ffb451cf547495ccb4f16a6eaf441417660ecd6709fc4c3a7939dcfdba6e5fe58fa75c458520f8ead0666880b30f0f91ea60cb3e3aaff97a4a7461c63457b9a72416ba446feedf33bc5a30819df62c2b8e8b13c8718d1278555d4ae3c7c17a32bbebdadedebc3e7b"}}, {0x15, &(0x7f0000000f40)=@string={0x15, 0x3, "8e0cf4636f8cc3e9c742cb92861369b9849d0a"}}, {0x4d, &(0x7f0000000f80)=@string={0x4d, 0x3, "61799d5e4740447b0842e80897a92718f09263ba11dbbcfbcdccffd48edd8c14774ebe975eb7502605bf1d528cf5596c16d38aaf8a086157fd62d104a3739e136cf9f060f85ac51b72bbc0"}}]}) 07:10:26 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 07:10:26 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r1 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1130c3, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:26 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r4, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0/file0\x00'}) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) 07:10:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r8, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r8, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x55}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x1) 07:10:26 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) read$hiddev(r1, &(0x7f00000003c0)=""/68, 0x44) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:26 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) syz_open_dev$sg(&(0x7f00000000c0), 0x84, 0x42) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:26 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x12}}, './file1\x00'}) 07:10:26 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) r1 = syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:26 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0x78, ""/120}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 07:10:26 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:26 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, '.\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x12}}, './file1\x00'}) [ 164.320294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.321984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:10:36 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:36 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 07:10:36 executing program 0: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x4f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa5}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x39, 0x17}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x44}}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) r5 = syz_open_dev$hiddev(&(0x7f0000000580), 0x1906, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67c027948d"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f75b80e81ca9843bdb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "633702b1b64e7393bb1fc1711069a3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000900)=0x3eac) syz_usb_connect$uac1(0x5, 0xd9, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x1, 0xe0, 0x72, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9, "10"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x2], 0xaa}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x4, "420fd529e30c"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xa3, "62019fca44a7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x5, 0x5, 0x7, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc847, 0x7, 0xce, "87caefb3"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x5, 0x83}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0x7, {0x7, 0x25, 0x1, 0x81, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x22, 0x2, 0x3f, 0x7f, "f8cefc1db99386d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x80, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x2, 0x5, 0x5, 0x10, 0x9}, 0x46, &(0x7f0000000d00)={0x5, 0xf, 0x46, 0x6, [@generic={0x3, 0x10, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x20, 0x0, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0xc9, 0xf00, 0x8001, [0x30, 0x0, 0xffc0, 0xff00cf, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xb, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x2, 0x662}]}, 0x6, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x40a}}, {0xca, &(0x7f0000000e40)=@string={0xca, 0x3, "18bf8a268f9c29a8d2f27f70cdd86ca3b520a1dead8f5168295ea862df34e822a45904eac366e4c8b9444b3d06baf727b4a27f8979c2abb571bb67f5fe8d653fae3826f59e75a0e9904baa716daa9ffd2b098d1027a7a1517d52de83cd99ffe9ffb451cf547495ccb4f16a6eaf441417660ecd6709fc4c3a7939dcfdba6e5fe58fa75c458520f8ead0666880b30f0f91ea60cb3e3aaff97a4a7461c63457b9a72416ba446feedf33bc5a30819df62c2b8e8b13c8718d1278555d4ae3c7c17a32bbebdadedebc3e7b"}}, {0x15, &(0x7f0000000f40)=@string={0x15, 0x3, "8e0cf4636f8cc3e9c742cb92861369b9849d0a"}}, {0x4d, &(0x7f0000000f80)=@string={0x4d, 0x3, "61799d5e4740447b0842e80897a92718f09263ba11dbbcfbcdccffd48edd8c14774ebe975eb7502605bf1d528cf5596c16d38aaf8a086157fd62d104a3739e136cf9f060f85ac51b72bbc0"}}]}) 07:10:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r7, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r7, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) 07:10:36 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r4, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0/file0\x00'}) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) 07:10:36 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40242, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x12}}, './file1\x00'}) 07:10:36 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:36 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) read$eventfd(r0, &(0x7f0000000080), 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:36 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 07:10:36 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:36 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x12}}, './file1\x00'}) 07:10:36 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:36 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioprio_set$uid(0x0, 0xee01, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:36 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r4, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0/file0\x00'}) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) [ 174.246247] [ 174.246592] ===================================== [ 174.247287] WARNING: bad unlock balance detected! [ 174.247973] 6.19.0-rc5-next-20260116 #1 Not tainted [ 174.248698] ------------------------------------- [ 174.249380] syz-executor.6/4310 is trying to release lock (rcu_read_lock) at: [ 174.250409] [] __wait_on_freeing_inode+0x105/0x350 [ 174.252107] but there are no more locks to release! [ 174.253358] [ 174.253358] other info that might help us debug this: [ 174.254792] 4 locks held by syz-executor.6/4310: [ 174.255841] #0: ffff88800f8863f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 174.257827] #1: ffff88803c508d68 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 174.259870] #2: ffff88800f892950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 174.262421] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 174.264275] [ 174.264275] stack backtrace: [ 174.265272] CPU: 1 UID: 0 PID: 4310 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 174.265299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 174.265311] Call Trace: [ 174.265319] [ 174.265327] dump_stack_lvl+0xca/0x120 [ 174.265374] ? __wait_on_freeing_inode+0x105/0x350 [ 174.265400] print_unlock_imbalance_bug+0x118/0x130 [ 174.265428] ? __wait_on_freeing_inode+0x105/0x350 [ 174.265454] lock_release+0x1ee/0x270 [ 174.265481] __wait_on_freeing_inode+0x10a/0x350 [ 174.265508] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 174.265536] ? __pfx_var_wake_function+0x10/0x10 [ 174.265568] ? lock_is_held_type+0x9e/0x120 [ 174.265589] insert_inode_locked+0x25f/0x890 [ 174.265620] __ext4_new_inode+0x223d/0x4cd0 [ 174.265651] ? __pfx___ext4_new_inode+0x10/0x10 [ 174.265677] ? __pfx___dquot_initialize+0x10/0x10 [ 174.265710] ? __pfx_avc_has_perm+0x10/0x10 [ 174.265738] ext4_symlink+0x623/0xb40 [ 174.265772] ? __pfx_ext4_symlink+0x10/0x10 [ 174.265801] ? security_inode_permission+0x72/0xe0 [ 174.265825] vfs_symlink+0x44b/0x840 [ 174.265854] filename_symlinkat+0x158/0x440 [ 174.265880] ? __pfx_filename_symlinkat+0x10/0x10 [ 174.265905] ? strncpy_from_user+0x21b/0x2f0 [ 174.265935] __x64_sys_symlink+0x82/0x110 [ 174.265960] do_syscall_64+0xbf/0x420 [ 174.265983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.266006] RIP: 0033:0x7fac5b9ee427 [ 174.266022] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 174.266042] RSP: 002b:00007ffde5cbf4e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 174.266062] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac5b9ee427 [ 174.266076] RDX: ffffffffffffffbc RSI: 00007fac5ba4900e RDI: 00007fac5ba481dd [ 174.266090] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffde5cbef60 [ 174.266103] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 174.266116] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffde5cbf5b0 [ 174.266135] [ 174.295845] ------------[ cut here ]------------ [ 174.298122] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.6/4310 [ 174.299748] Modules linked in: [ 174.300274] CPU: 1 UID: 0 PID: 4310 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 174.301814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 174.303078] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 174.303996] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 174.306691] RSP: 0018:ffff888046ccf9a0 EFLAGS: 00010286 [ 174.307538] RAX: 00000000ffffffff RBX: ffff88801aa80000 RCX: ffffffff815660f7 [ 174.308640] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801aa803fc [ 174.309726] RBP: ffff88801aa80000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 174.310829] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801aa80000 [ 174.311914] R13: 0000000000000001 R14: ffffffff85c0e0f0 R15: ffff88801b943c48 [ 174.313029] FS: 000055557d737400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 174.314270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.315186] CR2: 00007f0f88c93543 CR3: 0000000041b6f000 CR4: 0000000000350ef0 [ 174.316301] Call Trace: [ 174.316831] [ 174.318107] __wait_on_freeing_inode+0x10f/0x350 [ 174.319403] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 174.321609] ? __pfx_var_wake_function+0x10/0x10 [ 174.323931] ? lock_is_held_type+0x9e/0x120 [ 174.326017] insert_inode_locked+0x25f/0x890 [ 174.329109] __ext4_new_inode+0x223d/0x4cd0 [ 174.333871] ? __pfx___ext4_new_inode+0x10/0x10 [ 174.336181] ? __pfx___dquot_initialize+0x10/0x10 [ 174.337684] ? __pfx_avc_has_perm+0x10/0x10 [ 174.341036] ext4_symlink+0x623/0xb40 [ 174.345302] ? __pfx_ext4_symlink+0x10/0x10 [ 174.347225] ? security_inode_permission+0x72/0xe0 [ 174.350330] vfs_symlink+0x44b/0x840 [ 174.352821] filename_symlinkat+0x158/0x440 [ 174.354957] ? __pfx_filename_symlinkat+0x10/0x10 [ 174.356366] ? strncpy_from_user+0x21b/0x2f0 [ 174.360074] __x64_sys_symlink+0x82/0x110 [ 174.361546] do_syscall_64+0xbf/0x420 [ 174.363042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.364038] RIP: 0033:0x7fac5b9ee427 [ 174.364783] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 174.367478] RSP: 002b:00007ffde5cbf4e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 174.368675] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac5b9ee427 [ 174.369788] RDX: ffffffffffffffbc RSI: 00007fac5ba4900e RDI: 00007fac5ba481dd [ 174.370891] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffde5cbef60 [ 174.372000] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 174.373130] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffde5cbf5b0 [ 174.378114] [ 174.378542] irq event stamp: 1103 [ 174.379040] hardirqs last enabled at (1103): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 174.380597] hardirqs last disabled at (1102): [] _raw_spin_lock_irqsave+0x53/0x60 [ 174.382105] softirqs last enabled at (1098): [] kernel_fpu_end+0x59/0x70 [ 174.383510] softirqs last disabled at (1096): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 174.387004] ---[ end trace 0000000000000000 ]--- [ 174.391285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.396932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:10:36 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 07:10:36 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) syz_io_uring_setup(0x555b, &(0x7f0000000080)={0x0, 0x2f84, 0x0, 0x0, 0x2ae}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r7, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r7, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) 07:10:36 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) r0 = eventfd(0xfffffff9) eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:44 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x12}}, './file1\x00'}) 07:10:44 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r4, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r6 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r6, 0x100, r4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0/file0\x00'}) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) 07:10:44 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) eventfd(0xfffffff9) eventfd(0x3) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20a080, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:44 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:44 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9c00}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ee7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x43}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x8000000) recvmsg(r0, &(0x7f00000013c0)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/115, 0x73}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2101) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x78, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4be7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3fe0}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001640)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8841) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001940)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000019c0), r6) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x54, r7, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x64, r7, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048094}, 0x40028c40) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x40, r7, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x487191c4}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2a}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c850}, 0x4008000) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) 07:10:44 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 07:10:44 executing program 6: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x12}}, './file1\x00'}) 07:10:44 executing program 0: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x4f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x41) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa5}}, './file0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x39, 0x17}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x44}}, 0x4004004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) r5 = syz_open_dev$hiddev(&(0x7f0000000580), 0x1906, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010000}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xe8, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67c027948d"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f75b80e81ca9843bdb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x13, 0x4, "633702b1b64e7393bb1fc1711069a3"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000000) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000900)=0x3eac) syz_usb_connect$uac1(0x5, 0xd9, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x1, 0xe0, 0x72, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9, "10"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x2], 0xaa}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x4, "420fd529e30c"}, @processing_unit={0xd, 0x24, 0x7, 0x2, 0x5, 0xa3, "62019fca44a7"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x5, 0x5, 0x7, 0x1}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x7f, "f7"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc847, 0x7, 0xce, "87caefb3"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x3, 0x5, 0x83}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x5, 0x7, {0x7, 0x25, 0x1, 0x81, 0x3, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x22, 0x2, 0x3f, 0x7f, "f8cefc1db99386d7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x81, 0x80, 0x8, {0x7, 0x25, 0x1, 0x2, 0x0, 0x20}}}}}}}]}}, &(0x7f0000001000)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x300, 0x2, 0x5, 0x5, 0x10, 0x9}, 0x46, &(0x7f0000000d00)={0x5, 0xf, 0x46, 0x6, [@generic={0x3, 0x10, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x20, 0x0, 0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0xc9, 0xf00, 0x8001, [0x30, 0x0, 0xffc0, 0xff00cf, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0xb, 0x1f}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x8, 0x2, 0x662}]}, 0x6, [{0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x40a}}, {0xca, &(0x7f0000000e40)=@string={0xca, 0x3, "18bf8a268f9c29a8d2f27f70cdd86ca3b520a1dead8f5168295ea862df34e822a45904eac366e4c8b9444b3d06baf727b4a27f8979c2abb571bb67f5fe8d653fae3826f59e75a0e9904baa716daa9ffd2b098d1027a7a1517d52de83cd99ffe9ffb451cf547495ccb4f16a6eaf441417660ecd6709fc4c3a7939dcfdba6e5fe58fa75c458520f8ead0666880b30f0f91ea60cb3e3aaff97a4a7461c63457b9a72416ba446feedf33bc5a30819df62c2b8e8b13c8718d1278555d4ae3c7c17a32bbebdadedebc3e7b"}}, {0x15, &(0x7f0000000f40)=@string={0x15, 0x3, "8e0cf4636f8cc3e9c742cb92861369b9849d0a"}}, {0x4d, &(0x7f0000000f80)=@string={0x4d, 0x3, "61799d5e4740447b0842e80897a92718f09263ba11dbbcfbcdccffd48edd8c14774ebe975eb7502605bf1d528cf5596c16d38aaf8a086157fd62d104a3739e136cf9f060f85ac51b72bbc0"}}]}) 07:10:44 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:44 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) eventfd(0xfffffff9) eventfd(0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) 07:10:44 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x900000}, 0xb) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/218, 0xda}, {&(0x7f0000000280)=""/181, 0xb5}], 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000c80), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) 07:10:44 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 07:10:44 executing program 3: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x49c5, &(0x7f0000000040)={0x0, 0xafe2, 0x10, 0x0, 0x216}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0xffffffff, 0x2, 0x7}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f0000000240)) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000280)=0xa) syz_io_uring_setup(0x5c54, &(0x7f00000002c0)={0x0, 0xe9b9, 0x4, 0x1, 0x144}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000380)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) 07:10:44 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x12}}, './file1\x00'}) 07:10:44 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, 0x0, 0x38, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0xfffffffffffff800, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x60a}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r4 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "a755f2ae2757651b21e6dd40cf46ebb24c42f997d723293193c3a2638ac0e15e9288a62eb75429d23996d397b5479445f892d4d399a593981a946fa35ec375d1", 0x16}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r4, 0x1) syz_io_uring_setup(0x263d, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x24a, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r6 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$negate(0xd, r6, 0x100, r4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0/file0\x00'}) keyctl$instantiate(0xc, r0, 0x0, 0x0, 0x0) 07:10:44 executing program 4: ioprio_set$uid(0x3, 0x0, 0x2000) ioprio_set$uid(0x3, 0xee01, 0x4004) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x0) eventfd(0xfffffff9) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:tetex_data_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x1) [ 182.457146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.459645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:10:44 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, '.\x00'}) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x80000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 07:10:44 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x12}}, './file1\x00'}) VM DIAGNOSIS: 07:10:36 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff888015cdfb40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11002b9bf69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff888015cdfb78 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555582172400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe601e2ff8 CR3=000000001dc53000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff829750a0 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88806cf08940 R8 =0000000000000001 R9 =ffffed100d9e1119 R10=0000000000000000 R11=652d7a7973205043 R12=0000000000000073 R13=ffffffff889c19f0 R14=ffffffff889c19a0 R15=ffffffff889c1c60 RIP=ffffffff829750f5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557d737400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0f88c93543 CR3=0000000041b6f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000