Warning: Permanently added '[localhost]:60962' (ECDSA) to the list of known hosts. 2022/10/02 07:08:15 fuzzer started 2022/10/02 07:08:15 dialing manager at localhost:35095 syzkaller login: [ 44.519196] cgroup: Unknown subsys name 'net' [ 44.611852] cgroup: Unknown subsys name 'rlimit' 2022/10/02 07:08:30 syscalls: 206 2022/10/02 07:08:30 code coverage: enabled 2022/10/02 07:08:30 comparison tracing: enabled 2022/10/02 07:08:30 extra coverage: enabled 2022/10/02 07:08:30 setuid sandbox: enabled 2022/10/02 07:08:30 namespace sandbox: enabled 2022/10/02 07:08:30 Android sandbox: enabled 2022/10/02 07:08:30 fault injection: enabled 2022/10/02 07:08:30 leak checking: enabled 2022/10/02 07:08:30 net packet injection: enabled 2022/10/02 07:08:30 net device setup: enabled 2022/10/02 07:08:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 07:08:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 07:08:30 USB emulation: enabled 2022/10/02 07:08:30 hci packet injection: enabled 2022/10/02 07:08:30 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 07:08:30 802.15.4 emulation: enabled 2022/10/02 07:08:30 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 07:08:31 starting 8 fuzzer processes 07:08:31 executing program 2: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x2e1c, &(0x7f00000001c0)={0x0, 0x4c25, 0x1, 0x0, 0x1d7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r2, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x2}}, 0x5) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000340)) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x2000c080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40800}, 0x44085) getgroups(0x6, &(0x7f0000000840)=[0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0x0]) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000880), 0x10002, 0x0) ioctl$CDROMSTOP(r5, 0x5307) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$CDROMSUBCHNL(r6, 0x530b, &(0x7f0000000900)={0x1, 0x1, 0x7, 0xd, 0x9, 0xfa, @lba=0x401, @msf={0x9, 0x3, 0x3}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000940), 0x20000, 0x0) socketpair(0x22, 0x3, 0x8, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x14}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfea}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004800) 07:08:31 executing program 0: ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000000)={0x5, 0x20, 0x58, 0x3, 0x80, 0x6}) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000000a80)) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x40811}, 0x80) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001600), 0x4a0080, 0x0) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000001640)={0x2, 0xf4, 0x4, 0xe, 0x5, 0xff, @lba=0x6, @lba=0xfffffffd}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001680), 0x800, 0x0) ioctl$CDROMEJECT(r0, 0x5309) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f00000016c0)={0x400, 0xffff}) r2 = getuid() fchownat(r0, &(0x7f0000001700)='.\x00', r2, 0xee01, 0x1000) mknodat$null(r1, &(0x7f0000001740)='./file0\x00', 0x200, 0x103) clock_settime(0x5, &(0x7f0000001780)) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f00000017c0)='ns/pid_for_children\x00') r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001800), 0x208000, 0x0) ioctl$CDROMVOLCTRL(r4, 0x530a, &(0x7f0000001840)={0x8, 0x8, 0x98, 0x9}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001880), 0x200080, 0x0) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f00000018c0)={0x6, 0x2, 0x1, 0x6, 0x40, 0x6}) clock_gettime(0x7, &(0x7f0000002340)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002380)='./binderfs2/binder-control\x00', 0x800, 0x0) 07:08:31 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "2dbaf9c7310fb69416d432d54c2ed228281ce204fdc4a3a3c741b0a99790538820c8aaf537841a7f462f25fc823bf4b7d1d486551a3b797d1797e7f14d7f64ccf2096ade5531fc0e851fd40dd8d9691e3c2089286d98bdda78b8cc34d23effa258c3227e6dffea243b7b4eb0a27f43d03cdcba4b0a279617537ef3900df96924c9e4352737e8f23ebe6b34e0b21edc169f38552f8522d5c13a5495cd969b4d689e6e603ce310d1dd4455e566fa4aeeb18fd21b8a1db56eebd84d08bda1efb8f1b1dd287168c27e8a5ca76bad6ccdeb25d96a78bc5f46a8ccd4b3f933bda0432212f6"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49bd7076bc0722d06e02af5fd3c2ecbab01bc9e2610c"}}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8b8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf0f, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x538}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9597}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000050}, 0x880) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = syz_io_uring_complete(0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) ioctl$CDROMRESUME(r0, 0x5302) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000440)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='sched\x00') r3 = syz_io_uring_complete(r1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbf}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ee5497d}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x6, 0x10000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x6, 0x7d, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001240)={'syztnl2\x00', r5, 0x1, 0x8000, 0x200, 0x0, {{0x23, 0x4, 0x1, 0x35, 0x8c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x56, 0x2, [{0x1, 0x4, "e543"}, {0x1, 0x3, "85"}, {0x2, 0x4, '`Q'}, {0x2, 0x7, "a3a242e375"}, {0x1, 0x10, "89e8a280bdbe39707ecc486741fa"}, {0x7, 0x12, "7aab94ce569279a6c7ee8c253be80308"}, {0x2, 0x12, "77258357caa1fa53c05435720e5b3128"}, {0x7, 0xa, "fd9854dcd0a0abc7"}]}, @ssrr={0x89, 0x17, 0x58, [@remote, @empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}, @end]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x121, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) r6 = syz_open_dev$vcsa(&(0x7f0000001440), 0x7fff, 0x2) readlinkat(r6, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)=""/24, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r7, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) [ 59.952250] audit: type=1400 audit(1664694511.548:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:08:31 executing program 7: r0 = syz_io_uring_setup(0x3361, &(0x7f0000000000)={0x0, 0x9a1f, 0x1, 0x2, 0x2e3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x8000000) io_uring_setup(0x25fc, &(0x7f0000000140)={0x0, 0x9f19, 0x20, 0x1, 0x272, 0x0, r1}) ioctl$CDROMPAUSE(r1, 0x5301) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000001c0)={0x2, 0x100, 0x5a6, 0x7f, 0x5, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x4010, r0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000200), 0x1000000, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) utimensat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{r2, r3/1000+10000}, {0x0, 0xea60}}, 0x100) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000003c0)={0x1, 0x2, 0x9, 0x2, 0x5, 0x8}) r4 = syz_open_dev$vcsu(&(0x7f0000000400), 0x2, 0x204000) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x1ff) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0x0) syz_io_uring_setup(0x6995, &(0x7f0000000440)={0x0, 0x546b, 0x20, 0x2, 0x203, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=0x0) r7 = socket$inet6(0xa, 0x80000, 0x8) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2004, @fd=r7, 0xd3e, 0x9, 0x1, 0x17, 0x0, {0x2}}, 0x20) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x52008000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 07:08:31 executing program 4: faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/192, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80) mknodat(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x8000, 0x10000) faccessat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8, 0x1100) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x100, 0x84, 0x16}, 0x18) fchmodat(r0, &(0x7f0000000280)='./file0\x00', 0x80) utimensat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{}, {0x0, 0xea60}}, 0x100) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x509000, 0x104, 0x18}, 0x18) mknodat$null(r1, &(0x7f00000003c0)='./file0\x00', 0x2, 0x103) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000400)) mknodat(r0, &(0x7f0000000440)='./file0/file0\x00', 0x4, 0x4) mknodat$null(r1, &(0x7f0000000480)='./file0/file0\x00', 0xc000, 0x103) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x40, 0x0, 0x1}, 0x18) unlinkat(r3, &(0x7f0000000540)='./file0/file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip_vs\x00') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000840)={&(0x7f00000005c0), 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x188, r5, 0x11, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xde68}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x982}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x90}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$CDROMSEEK(r4, 0x5316, &(0x7f0000000880)={0x8, 0x7, 0x7, 0x3, 0x3, 0x2}) 07:08:31 executing program 5: prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f00000000c0)={@lba=0x8, 0x1, 0x5, &(0x7f0000000080)=""/5}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f0000000140)={0x2, 0x24, 0x4, 0x3, 0x0, 0x4, @msf={0x3, 0xff, 0x4}, @msf={0x8, 0x6, 0x9}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0) unlinkat(r2, &(0x7f00000001c0)='./file0\x00', 0x200) wait4(0x0, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf4, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@loopback, @in6=@empty}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe8) r4 = syz_io_uring_complete(0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r1, 0x103, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) r5 = syz_open_dev$vcsa(&(0x7f0000000740), 0x3f, 0x600) fchmodat(r5, &(0x7f0000000780)='./file0\x00', 0x2e) ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, &(0x7f0000000800)={@lba=0x80, 0x1, 0x3}) 07:08:31 executing program 3: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x54}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000140)={@id={0x2, 0x0, @b}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc1}}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x3a1800, 0x0) faccessat2(r0, &(0x7f0000000200)='./file0\x00', 0x8, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000240)={@id={0x2, 0x0, @c}}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000280)=0x1, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x110, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5a}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x118c}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5e9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c005) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0)={0x3, 0x2, 0x20, 0x6, 0x2}, 0x14) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$CDROMRESET(r1, 0x5312) mknodat$loop(r1, &(0x7f0000000540)='./file0\x00', 0x6000, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000580)="37af83c21520d95ff1e05ca637529aeb", 0x10) mknodat$null(r1, &(0x7f00000005c0)='./file0\x00', 0x8, 0x103) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) utimensat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={{0x77359400}}, 0x100) syz_genetlink_get_family_id$fou(&(0x7f00000006c0), r0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x20800, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r2) 07:08:31 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/kcm\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x800000, 0x4, {{0x1b, 0x4, 0x2, 0x3, 0x6c, 0x65, 0x0, 0x1f, 0x4, 0x0, @broadcast, @local, {[@timestamp_addr={0x44, 0x54, 0x99, 0x1, 0x1, [{@loopback, 0x6}, {@rand_addr=0x64010100, 0xd343}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xffff8001}, {@dev={0xac, 0x14, 0x14, 0x2f}}, {@loopback, 0x6}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x9}, {@private=0xa010102}, {@loopback, 0xfffffffc}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', r2, 0x20, 0x700, 0x1, 0x200, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4}]}}}}}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xa1000, 0x0) ioctl$CDROMSETSPINDOWN(r3, 0x531e, &(0x7f0000000280)=0xe) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000002c0)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) ioctl$CDROMREADMODE1(r4, 0x530d, &(0x7f0000000340)={0x7, 0x6, 0x1, 0x40, 0xff, 0xff}) ioctl$CDROM_DISC_STATUS(r4, 0x5327) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2082c0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000e40)={'gretap0\x00', &(0x7f0000000e00)={'syztnl2\x00', r2, 0x10, 0x1, 0x3ff, 0x8, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x67, 0x0, 0x7, 0x0, 0x0, @private=0xa010102, @private=0xa010102}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000f40)={'gre0\x00', &(0x7f0000000e80)={'ip_vti0\x00', r2, 0x10, 0x8000, 0x1ff, 0x400, {{0x22, 0x4, 0x0, 0x9, 0x88, 0x65, 0x0, 0x2, 0x29, 0x0, @empty, @remote, {[@generic={0x94, 0x11, "140e87ded638c106450abc66269362"}, @timestamp_addr={0x44, 0x24, 0x53, 0x1, 0x1, [{@rand_addr=0x64010100, 0x7f}, {@multicast2, 0x80000001}, {@multicast2}, {@local, 0xdb0}]}, @timestamp_addr={0x44, 0x3c, 0x43, 0x1, 0x9, [{@empty, 0x48}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4}, {@multicast1, 0xd1da}, {@broadcast, 0x40}]}]}}}}}) r6 = syz_io_uring_complete(0x0) ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f0000000f80)) r7 = syz_open_dev$vcsa(&(0x7f0000000fc0), 0x0, 0x20800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000001000)) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_WAITACTIVE(r8, 0x5607) [ 61.158930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.161462] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.163226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.167011] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.169576] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.170884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.182571] Bluetooth: hci0: HCI_REQ-0x0c1a [ 61.223991] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.226240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.228521] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.242954] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.248668] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.249944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.257679] Bluetooth: hci1: HCI_REQ-0x0c1a [ 61.302818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.304715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.307824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.309524] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.311123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.313540] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.316175] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.317239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.318383] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.319517] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.320667] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.321705] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.323332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.324474] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.325571] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.326672] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.327992] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.329046] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.342983] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.344332] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.346567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.347972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.351845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.353622] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.355132] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.359958] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.361108] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.362248] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.363896] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.365250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.366583] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.370731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.371949] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.379692] Bluetooth: hci4: HCI_REQ-0x0c1a [ 61.385281] Bluetooth: hci5: HCI_REQ-0x0c1a [ 61.391147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.392537] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 61.397905] Bluetooth: hci6: HCI_REQ-0x0c1a [ 61.407490] Bluetooth: hci3: HCI_REQ-0x0c1a [ 61.408463] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.414210] Bluetooth: hci2: HCI_REQ-0x0c1a [ 61.439683] Bluetooth: hci7: HCI_REQ-0x0c1a [ 63.247768] Bluetooth: hci0: command 0x0409 tx timeout [ 63.310779] Bluetooth: hci1: command 0x0409 tx timeout [ 63.438545] Bluetooth: hci3: command 0x0409 tx timeout [ 63.438658] Bluetooth: hci6: command 0x0409 tx timeout [ 63.440218] Bluetooth: hci4: command 0x0409 tx timeout [ 63.440257] Bluetooth: hci2: command 0x0409 tx timeout [ 63.440864] Bluetooth: hci5: command 0x0409 tx timeout [ 63.502426] Bluetooth: hci7: command 0x0409 tx timeout [ 65.294514] Bluetooth: hci0: command 0x041b tx timeout [ 65.359115] Bluetooth: hci1: command 0x041b tx timeout [ 65.486482] Bluetooth: hci5: command 0x041b tx timeout [ 65.486909] Bluetooth: hci3: command 0x041b tx timeout [ 65.487296] Bluetooth: hci2: command 0x041b tx timeout [ 65.487711] Bluetooth: hci4: command 0x041b tx timeout [ 65.488103] Bluetooth: hci6: command 0x041b tx timeout [ 65.550435] Bluetooth: hci7: command 0x041b tx timeout [ 67.342468] Bluetooth: hci0: command 0x040f tx timeout [ 67.406440] Bluetooth: hci1: command 0x040f tx timeout [ 67.534510] Bluetooth: hci6: command 0x040f tx timeout [ 67.535000] Bluetooth: hci4: command 0x040f tx timeout [ 67.535723] Bluetooth: hci2: command 0x040f tx timeout [ 67.536149] Bluetooth: hci3: command 0x040f tx timeout [ 67.536573] Bluetooth: hci5: command 0x040f tx timeout [ 67.598394] Bluetooth: hci7: command 0x040f tx timeout [ 69.390447] Bluetooth: hci0: command 0x0419 tx timeout [ 69.454472] Bluetooth: hci1: command 0x0419 tx timeout [ 69.582431] Bluetooth: hci5: command 0x0419 tx timeout [ 69.582902] Bluetooth: hci3: command 0x0419 tx timeout [ 69.583300] Bluetooth: hci2: command 0x0419 tx timeout [ 69.583765] Bluetooth: hci4: command 0x0419 tx timeout [ 69.584174] Bluetooth: hci6: command 0x0419 tx timeout [ 69.646453] Bluetooth: hci7: command 0x0419 tx timeout 07:09:28 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "2dbaf9c7310fb69416d432d54c2ed228281ce204fdc4a3a3c741b0a99790538820c8aaf537841a7f462f25fc823bf4b7d1d486551a3b797d1797e7f14d7f64ccf2096ade5531fc0e851fd40dd8d9691e3c2089286d98bdda78b8cc34d23effa258c3227e6dffea243b7b4eb0a27f43d03cdcba4b0a279617537ef3900df96924c9e4352737e8f23ebe6b34e0b21edc169f38552f8522d5c13a5495cd969b4d689e6e603ce310d1dd4455e566fa4aeeb18fd21b8a1db56eebd84d08bda1efb8f1b1dd287168c27e8a5ca76bad6ccdeb25d96a78bc5f46a8ccd4b3f933bda0432212f6"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49bd7076bc0722d06e02af5fd3c2ecbab01bc9e2610c"}}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8b8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf0f, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x538}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9597}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000050}, 0x880) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = syz_io_uring_complete(0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) ioctl$CDROMRESUME(r0, 0x5302) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000440)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='sched\x00') r3 = syz_io_uring_complete(r1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbf}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ee5497d}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x6, 0x10000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x6, 0x7d, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001240)={'syztnl2\x00', r5, 0x1, 0x8000, 0x200, 0x0, {{0x23, 0x4, 0x1, 0x35, 0x8c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x56, 0x2, [{0x1, 0x4, "e543"}, {0x1, 0x3, "85"}, {0x2, 0x4, '`Q'}, {0x2, 0x7, "a3a242e375"}, {0x1, 0x10, "89e8a280bdbe39707ecc486741fa"}, {0x7, 0x12, "7aab94ce569279a6c7ee8c253be80308"}, {0x2, 0x12, "77258357caa1fa53c05435720e5b3128"}, {0x7, 0xa, "fd9854dcd0a0abc7"}]}, @ssrr={0x89, 0x17, 0x58, [@remote, @empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}, @end]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x121, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) r6 = syz_open_dev$vcsa(&(0x7f0000001440), 0x7fff, 0x2) readlinkat(r6, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)=""/24, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r7, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) 07:09:28 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "2dbaf9c7310fb69416d432d54c2ed228281ce204fdc4a3a3c741b0a99790538820c8aaf537841a7f462f25fc823bf4b7d1d486551a3b797d1797e7f14d7f64ccf2096ade5531fc0e851fd40dd8d9691e3c2089286d98bdda78b8cc34d23effa258c3227e6dffea243b7b4eb0a27f43d03cdcba4b0a279617537ef3900df96924c9e4352737e8f23ebe6b34e0b21edc169f38552f8522d5c13a5495cd969b4d689e6e603ce310d1dd4455e566fa4aeeb18fd21b8a1db56eebd84d08bda1efb8f1b1dd287168c27e8a5ca76bad6ccdeb25d96a78bc5f46a8ccd4b3f933bda0432212f6"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49bd7076bc0722d06e02af5fd3c2ecbab01bc9e2610c"}}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8b8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf0f, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x538}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9597}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000050}, 0x880) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = syz_io_uring_complete(0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) ioctl$CDROMRESUME(r0, 0x5302) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000440)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='sched\x00') r3 = syz_io_uring_complete(r1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbf}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ee5497d}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x6, 0x10000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x6, 0x7d, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001240)={'syztnl2\x00', r5, 0x1, 0x8000, 0x200, 0x0, {{0x23, 0x4, 0x1, 0x35, 0x8c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x56, 0x2, [{0x1, 0x4, "e543"}, {0x1, 0x3, "85"}, {0x2, 0x4, '`Q'}, {0x2, 0x7, "a3a242e375"}, {0x1, 0x10, "89e8a280bdbe39707ecc486741fa"}, {0x7, 0x12, "7aab94ce569279a6c7ee8c253be80308"}, {0x2, 0x12, "77258357caa1fa53c05435720e5b3128"}, {0x7, 0xa, "fd9854dcd0a0abc7"}]}, @ssrr={0x89, 0x17, 0x58, [@remote, @empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}, @end]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x121, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) r6 = syz_open_dev$vcsa(&(0x7f0000001440), 0x7fff, 0x2) readlinkat(r6, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)=""/24, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r7, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) 07:09:28 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "2dbaf9c7310fb69416d432d54c2ed228281ce204fdc4a3a3c741b0a99790538820c8aaf537841a7f462f25fc823bf4b7d1d486551a3b797d1797e7f14d7f64ccf2096ade5531fc0e851fd40dd8d9691e3c2089286d98bdda78b8cc34d23effa258c3227e6dffea243b7b4eb0a27f43d03cdcba4b0a279617537ef3900df96924c9e4352737e8f23ebe6b34e0b21edc169f38552f8522d5c13a5495cd969b4d689e6e603ce310d1dd4455e566fa4aeeb18fd21b8a1db56eebd84d08bda1efb8f1b1dd287168c27e8a5ca76bad6ccdeb25d96a78bc5f46a8ccd4b3f933bda0432212f6"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49bd7076bc0722d06e02af5fd3c2ecbab01bc9e2610c"}}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8b8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf0f, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x538}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9597}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000050}, 0x880) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = syz_io_uring_complete(0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) ioctl$CDROMRESUME(r0, 0x5302) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000440)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='sched\x00') r3 = syz_io_uring_complete(r1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbf}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ee5497d}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x6, 0x10000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x6, 0x7d, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001240)={'syztnl2\x00', r5, 0x1, 0x8000, 0x200, 0x0, {{0x23, 0x4, 0x1, 0x35, 0x8c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x56, 0x2, [{0x1, 0x4, "e543"}, {0x1, 0x3, "85"}, {0x2, 0x4, '`Q'}, {0x2, 0x7, "a3a242e375"}, {0x1, 0x10, "89e8a280bdbe39707ecc486741fa"}, {0x7, 0x12, "7aab94ce569279a6c7ee8c253be80308"}, {0x2, 0x12, "77258357caa1fa53c05435720e5b3128"}, {0x7, 0xa, "fd9854dcd0a0abc7"}]}, @ssrr={0x89, 0x17, 0x58, [@remote, @empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}, @end]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x121, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) r6 = syz_open_dev$vcsa(&(0x7f0000001440), 0x7fff, 0x2) readlinkat(r6, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)=""/24, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r7, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) ioctl$CDROM_DISC_STATUS(0xffffffffffffffff, 0x5327) 07:09:28 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "2dbaf9c7310fb69416d432d54c2ed228281ce204fdc4a3a3c741b0a99790538820c8aaf537841a7f462f25fc823bf4b7d1d486551a3b797d1797e7f14d7f64ccf2096ade5531fc0e851fd40dd8d9691e3c2089286d98bdda78b8cc34d23effa258c3227e6dffea243b7b4eb0a27f43d03cdcba4b0a279617537ef3900df96924c9e4352737e8f23ebe6b34e0b21edc169f38552f8522d5c13a5495cd969b4d689e6e603ce310d1dd4455e566fa4aeeb18fd21b8a1db56eebd84d08bda1efb8f1b1dd287168c27e8a5ca76bad6ccdeb25d96a78bc5f46a8ccd4b3f933bda0432212f6"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49bd7076bc0722d06e02af5fd3c2ecbab01bc9e2610c"}}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8b8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf0f, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x538}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9597}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000050}, 0x880) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = syz_io_uring_complete(0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) ioctl$CDROMRESUME(r0, 0x5302) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000440)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='sched\x00') r3 = syz_io_uring_complete(r1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbf}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ee5497d}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x6, 0x10000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x6, 0x7d, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001240)={'syztnl2\x00', r5, 0x1, 0x8000, 0x200, 0x0, {{0x23, 0x4, 0x1, 0x35, 0x8c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x56, 0x2, [{0x1, 0x4, "e543"}, {0x1, 0x3, "85"}, {0x2, 0x4, '`Q'}, {0x2, 0x7, "a3a242e375"}, {0x1, 0x10, "89e8a280bdbe39707ecc486741fa"}, {0x7, 0x12, "7aab94ce569279a6c7ee8c253be80308"}, {0x2, 0x12, "77258357caa1fa53c05435720e5b3128"}, {0x7, 0xa, "fd9854dcd0a0abc7"}]}, @ssrr={0x89, 0x17, 0x58, [@remote, @empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}, @end]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x121, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) r6 = syz_open_dev$vcsa(&(0x7f0000001440), 0x7fff, 0x2) readlinkat(r6, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)=""/24, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r7, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) 07:09:28 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "2dbaf9c7310fb69416d432d54c2ed228281ce204fdc4a3a3c741b0a99790538820c8aaf537841a7f462f25fc823bf4b7d1d486551a3b797d1797e7f14d7f64ccf2096ade5531fc0e851fd40dd8d9691e3c2089286d98bdda78b8cc34d23effa258c3227e6dffea243b7b4eb0a27f43d03cdcba4b0a279617537ef3900df96924c9e4352737e8f23ebe6b34e0b21edc169f38552f8522d5c13a5495cd969b4d689e6e603ce310d1dd4455e566fa4aeeb18fd21b8a1db56eebd84d08bda1efb8f1b1dd287168c27e8a5ca76bad6ccdeb25d96a78bc5f46a8ccd4b3f933bda0432212f6"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49bd7076bc0722d06e02af5fd3c2ecbab01bc9e2610c"}}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8b8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf0f, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x538}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9597}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000050}, 0x880) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = syz_io_uring_complete(0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) ioctl$CDROMRESUME(r0, 0x5302) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000440)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='sched\x00') r3 = syz_io_uring_complete(r1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbf}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ee5497d}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x6, 0x10000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x6, 0x7d, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001240)={'syztnl2\x00', r5, 0x1, 0x8000, 0x200, 0x0, {{0x23, 0x4, 0x1, 0x35, 0x8c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x56, 0x2, [{0x1, 0x4, "e543"}, {0x1, 0x3, "85"}, {0x2, 0x4, '`Q'}, {0x2, 0x7, "a3a242e375"}, {0x1, 0x10, "89e8a280bdbe39707ecc486741fa"}, {0x7, 0x12, "7aab94ce569279a6c7ee8c253be80308"}, {0x2, 0x12, "77258357caa1fa53c05435720e5b3128"}, {0x7, 0xa, "fd9854dcd0a0abc7"}]}, @ssrr={0x89, 0x17, 0x58, [@remote, @empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}, @end]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x121, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) r6 = syz_open_dev$vcsa(&(0x7f0000001440), 0x7fff, 0x2) readlinkat(r6, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)=""/24, 0x18) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) 07:09:29 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "2dbaf9c7310fb69416d432d54c2ed228281ce204fdc4a3a3c741b0a99790538820c8aaf537841a7f462f25fc823bf4b7d1d486551a3b797d1797e7f14d7f64ccf2096ade5531fc0e851fd40dd8d9691e3c2089286d98bdda78b8cc34d23effa258c3227e6dffea243b7b4eb0a27f43d03cdcba4b0a279617537ef3900df96924c9e4352737e8f23ebe6b34e0b21edc169f38552f8522d5c13a5495cd969b4d689e6e603ce310d1dd4455e566fa4aeeb18fd21b8a1db56eebd84d08bda1efb8f1b1dd287168c27e8a5ca76bad6ccdeb25d96a78bc5f46a8ccd4b3f933bda0432212f6"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49bd7076bc0722d06e02af5fd3c2ecbab01bc9e2610c"}}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8b8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf0f, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x538}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9597}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000050}, 0x880) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = syz_io_uring_complete(0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) ioctl$CDROMRESUME(r0, 0x5302) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000440)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='sched\x00') r3 = syz_io_uring_complete(r1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbf}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ee5497d}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x6, 0x10000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x6, 0x7d, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001240)={'syztnl2\x00', r5, 0x1, 0x8000, 0x200, 0x0, {{0x23, 0x4, 0x1, 0x35, 0x8c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x56, 0x2, [{0x1, 0x4, "e543"}, {0x1, 0x3, "85"}, {0x2, 0x4, '`Q'}, {0x2, 0x7, "a3a242e375"}, {0x1, 0x10, "89e8a280bdbe39707ecc486741fa"}, {0x7, 0x12, "7aab94ce569279a6c7ee8c253be80308"}, {0x2, 0x12, "77258357caa1fa53c05435720e5b3128"}, {0x7, 0xa, "fd9854dcd0a0abc7"}]}, @ssrr={0x89, 0x17, 0x58, [@remote, @empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}, @end]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x121, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) r6 = syz_open_dev$vcsa(&(0x7f0000001440), 0x7fff, 0x2) readlinkat(r6, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)=""/24, 0x18) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) 07:09:29 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "2dbaf9c7310fb69416d432d54c2ed228281ce204fdc4a3a3c741b0a99790538820c8aaf537841a7f462f25fc823bf4b7d1d486551a3b797d1797e7f14d7f64ccf2096ade5531fc0e851fd40dd8d9691e3c2089286d98bdda78b8cc34d23effa258c3227e6dffea243b7b4eb0a27f43d03cdcba4b0a279617537ef3900df96924c9e4352737e8f23ebe6b34e0b21edc169f38552f8522d5c13a5495cd969b4d689e6e603ce310d1dd4455e566fa4aeeb18fd21b8a1db56eebd84d08bda1efb8f1b1dd287168c27e8a5ca76bad6ccdeb25d96a78bc5f46a8ccd4b3f933bda0432212f6"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49bd7076bc0722d06e02af5fd3c2ecbab01bc9e2610c"}}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8b8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf0f, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x538}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9597}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000050}, 0x880) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = syz_io_uring_complete(0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) ioctl$CDROMRESUME(r0, 0x5302) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000440)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='sched\x00') r3 = syz_io_uring_complete(r1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbf}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ee5497d}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x6, 0x10000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x6, 0x7d, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001240)={'syztnl2\x00', r5, 0x1, 0x8000, 0x200, 0x0, {{0x23, 0x4, 0x1, 0x35, 0x8c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x56, 0x2, [{0x1, 0x4, "e543"}, {0x1, 0x3, "85"}, {0x2, 0x4, '`Q'}, {0x2, 0x7, "a3a242e375"}, {0x1, 0x10, "89e8a280bdbe39707ecc486741fa"}, {0x7, 0x12, "7aab94ce569279a6c7ee8c253be80308"}, {0x2, 0x12, "77258357caa1fa53c05435720e5b3128"}, {0x7, 0xa, "fd9854dcd0a0abc7"}]}, @ssrr={0x89, 0x17, 0x58, [@remote, @empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}, @end]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x121, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) r6 = syz_open_dev$vcsa(&(0x7f0000001440), 0x7fff, 0x2) readlinkat(r6, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)=""/24, 0x18) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) 07:09:29 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "2dbaf9c7310fb69416d432d54c2ed228281ce204fdc4a3a3c741b0a99790538820c8aaf537841a7f462f25fc823bf4b7d1d486551a3b797d1797e7f14d7f64ccf2096ade5531fc0e851fd40dd8d9691e3c2089286d98bdda78b8cc34d23effa258c3227e6dffea243b7b4eb0a27f43d03cdcba4b0a279617537ef3900df96924c9e4352737e8f23ebe6b34e0b21edc169f38552f8522d5c13a5495cd969b4d689e6e603ce310d1dd4455e566fa4aeeb18fd21b8a1db56eebd84d08bda1efb8f1b1dd287168c27e8a5ca76bad6ccdeb25d96a78bc5f46a8ccd4b3f933bda0432212f6"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49bd7076bc0722d06e02af5fd3c2ecbab01bc9e2610c"}}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8b8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf0f, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x538}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9597}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000050}, 0x880) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = syz_io_uring_complete(0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) ioctl$CDROMRESUME(r0, 0x5302) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000440)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='sched\x00') r3 = syz_io_uring_complete(r1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbf}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ee5497d}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x6, 0x10000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x6, 0x7d, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001240)={'syztnl2\x00', r5, 0x1, 0x8000, 0x200, 0x0, {{0x23, 0x4, 0x1, 0x35, 0x8c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x56, 0x2, [{0x1, 0x4, "e543"}, {0x1, 0x3, "85"}, {0x2, 0x4, '`Q'}, {0x2, 0x7, "a3a242e375"}, {0x1, 0x10, "89e8a280bdbe39707ecc486741fa"}, {0x7, 0x12, "7aab94ce569279a6c7ee8c253be80308"}, {0x2, 0x12, "77258357caa1fa53c05435720e5b3128"}, {0x7, 0xa, "fd9854dcd0a0abc7"}]}, @ssrr={0x89, 0x17, 0x58, [@remote, @empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}, @end]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x121, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) r6 = syz_open_dev$vcsa(&(0x7f0000001440), 0x7fff, 0x2) readlinkat(r6, &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)=""/24, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r7, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) [ 122.672110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.674699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.677985] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.681731] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.684215] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 122.685298] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.691055] Bluetooth: hci1: HCI_REQ-0x0c1a [ 122.801059] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 122.803547] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 122.805111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 122.807968] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 122.809847] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 122.811495] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 122.816660] Bluetooth: hci5: HCI_REQ-0x0c1a [ 122.836683] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.839537] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.841112] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.844890] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.848017] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 122.849436] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 122.850985] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.852269] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 122.855436] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 122.869878] Bluetooth: hci7: HCI_REQ-0x0c1a [ 122.900558] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 122.911561] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 122.913250] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 122.920619] Bluetooth: hci6: HCI_REQ-0x0c1a [ 124.751417] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 124.752324] Bluetooth: hci1: command 0x0409 tx timeout [ 124.878450] Bluetooth: hci5: command 0x0409 tx timeout [ 124.942465] Bluetooth: hci6: command 0x0409 tx timeout [ 124.943430] Bluetooth: hci7: command 0x0409 tx timeout [ 126.799391] Bluetooth: hci1: command 0x041b tx timeout [ 126.926585] Bluetooth: hci5: command 0x041b tx timeout [ 126.991405] Bluetooth: hci7: command 0x041b tx timeout [ 126.991862] Bluetooth: hci6: command 0x041b tx timeout [ 127.215812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.217049] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.218593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.221211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.222459] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 127.223228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.225770] Bluetooth: hci4: HCI_REQ-0x0c1a [ 128.847455] Bluetooth: hci1: command 0x040f tx timeout [ 128.974790] Bluetooth: hci5: command 0x040f tx timeout [ 129.038472] Bluetooth: hci6: command 0x040f tx timeout [ 129.038937] Bluetooth: hci7: command 0x040f tx timeout [ 129.295569] Bluetooth: hci4: command 0x0409 tx timeout [ 130.894391] Bluetooth: hci1: command 0x0419 tx timeout [ 131.022384] Bluetooth: hci5: command 0x0419 tx timeout [ 131.086503] Bluetooth: hci7: command 0x0419 tx timeout [ 131.086935] Bluetooth: hci6: command 0x0419 tx timeout [ 131.343386] Bluetooth: hci4: command 0x041b tx timeout [ 133.390443] Bluetooth: hci4: command 0x040f tx timeout [ 135.438395] Bluetooth: hci4: command 0x0419 tx timeout 07:10:23 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "2dbaf9c7310fb69416d432d54c2ed228281ce204fdc4a3a3c741b0a99790538820c8aaf537841a7f462f25fc823bf4b7d1d486551a3b797d1797e7f14d7f64ccf2096ade5531fc0e851fd40dd8d9691e3c2089286d98bdda78b8cc34d23effa258c3227e6dffea243b7b4eb0a27f43d03cdcba4b0a279617537ef3900df96924c9e4352737e8f23ebe6b34e0b21edc169f38552f8522d5c13a5495cd969b4d689e6e603ce310d1dd4455e566fa4aeeb18fd21b8a1db56eebd84d08bda1efb8f1b1dd287168c27e8a5ca76bad6ccdeb25d96a78bc5f46a8ccd4b3f933bda0432212f6"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49bd7076bc0722d06e02af5fd3c2ecbab01bc9e2610c"}}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8b8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf0f, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x538}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9597}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000050}, 0x880) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = syz_io_uring_complete(0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) ioctl$CDROMRESUME(r0, 0x5302) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000440)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='sched\x00') r3 = syz_io_uring_complete(r1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbf}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ee5497d}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x6, 0x10000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x6, 0x7d, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001240)={'syztnl2\x00', r5, 0x1, 0x8000, 0x200, 0x0, {{0x23, 0x4, 0x1, 0x35, 0x8c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x56, 0x2, [{0x1, 0x4, "e543"}, {0x1, 0x3, "85"}, {0x2, 0x4, '`Q'}, {0x2, 0x7, "a3a242e375"}, {0x1, 0x10, "89e8a280bdbe39707ecc486741fa"}, {0x7, 0x12, "7aab94ce569279a6c7ee8c253be80308"}, {0x2, 0x12, "77258357caa1fa53c05435720e5b3128"}, {0x7, 0xa, "fd9854dcd0a0abc7"}]}, @ssrr={0x89, 0x17, 0x58, [@remote, @empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}, @end]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x121, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) syz_open_dev$vcsa(&(0x7f0000001440), 0x7fff, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) 07:10:23 executing program 2: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x2e1c, &(0x7f00000001c0)={0x0, 0x4c25, 0x1, 0x0, 0x1d7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r2, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x2}}, 0x5) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000340)) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x2000c080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40800}, 0x44085) getgroups(0x6, &(0x7f0000000840)=[0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0x0]) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000880), 0x10002, 0x0) ioctl$CDROMSTOP(r5, 0x5307) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$CDROMSUBCHNL(r6, 0x530b, &(0x7f0000000900)={0x1, 0x1, 0x7, 0xd, 0x9, 0xfa, @lba=0x401, @msf={0x9, 0x3, 0x3}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000940), 0x20000, 0x0) socketpair(0x22, 0x3, 0x8, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x14}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfea}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004800) 07:10:23 executing program 4: faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/192, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80) mknodat(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x8000, 0x10000) faccessat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8, 0x1100) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x100, 0x84, 0x16}, 0x18) fchmodat(r0, &(0x7f0000000280)='./file0\x00', 0x80) utimensat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{}, {0x0, 0xea60}}, 0x100) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x509000, 0x104, 0x18}, 0x18) mknodat$null(r1, &(0x7f00000003c0)='./file0\x00', 0x2, 0x103) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000400)) mknodat(r0, &(0x7f0000000440)='./file0/file0\x00', 0x4, 0x4) mknodat$null(r1, &(0x7f0000000480)='./file0/file0\x00', 0xc000, 0x103) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x40, 0x0, 0x1}, 0x18) unlinkat(r3, &(0x7f0000000540)='./file0/file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip_vs\x00') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000840)={&(0x7f00000005c0), 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x188, r5, 0x11, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xde68}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x982}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x90}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$CDROMSEEK(r4, 0x5316, &(0x7f0000000880)={0x8, 0x7, 0x7, 0x3, 0x3, 0x2}) 07:10:23 executing program 5: prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f00000000c0)={@lba=0x8, 0x1, 0x5, &(0x7f0000000080)=""/5}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f0000000140)={0x2, 0x24, 0x4, 0x3, 0x0, 0x4, @msf={0x3, 0xff, 0x4}, @msf={0x8, 0x6, 0x9}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0) unlinkat(r2, &(0x7f00000001c0)='./file0\x00', 0x200) wait4(0x0, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf4, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@loopback, @in6=@empty}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe8) r4 = syz_io_uring_complete(0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r1, 0x103, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) r5 = syz_open_dev$vcsa(&(0x7f0000000740), 0x3f, 0x600) fchmodat(r5, &(0x7f0000000780)='./file0\x00', 0x2e) ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, &(0x7f0000000800)={@lba=0x80, 0x1, 0x3}) 07:10:23 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/kcm\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x800000, 0x4, {{0x1b, 0x4, 0x2, 0x3, 0x6c, 0x65, 0x0, 0x1f, 0x4, 0x0, @broadcast, @local, {[@timestamp_addr={0x44, 0x54, 0x99, 0x1, 0x1, [{@loopback, 0x6}, {@rand_addr=0x64010100, 0xd343}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xffff8001}, {@dev={0xac, 0x14, 0x14, 0x2f}}, {@loopback, 0x6}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x9}, {@private=0xa010102}, {@loopback, 0xfffffffc}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', r2, 0x20, 0x700, 0x1, 0x200, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4}]}}}}}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xa1000, 0x0) ioctl$CDROMSETSPINDOWN(r3, 0x531e, &(0x7f0000000280)=0xe) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000002c0)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) ioctl$CDROMREADMODE1(r4, 0x530d, &(0x7f0000000340)={0x7, 0x6, 0x1, 0x40, 0xff, 0xff}) ioctl$CDROM_DISC_STATUS(r4, 0x5327) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2082c0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000e40)={'gretap0\x00', &(0x7f0000000e00)={'syztnl2\x00', r2, 0x10, 0x1, 0x3ff, 0x8, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x67, 0x0, 0x7, 0x0, 0x0, @private=0xa010102, @private=0xa010102}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000f40)={'gre0\x00', &(0x7f0000000e80)={'ip_vti0\x00', r2, 0x10, 0x8000, 0x1ff, 0x400, {{0x22, 0x4, 0x0, 0x9, 0x88, 0x65, 0x0, 0x2, 0x29, 0x0, @empty, @remote, {[@generic={0x94, 0x11, "140e87ded638c106450abc66269362"}, @timestamp_addr={0x44, 0x24, 0x53, 0x1, 0x1, [{@rand_addr=0x64010100, 0x7f}, {@multicast2, 0x80000001}, {@multicast2}, {@local, 0xdb0}]}, @timestamp_addr={0x44, 0x3c, 0x43, 0x1, 0x9, [{@empty, 0x48}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4}, {@multicast1, 0xd1da}, {@broadcast, 0x40}]}]}}}}}) r6 = syz_io_uring_complete(0x0) ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f0000000f80)) r7 = syz_open_dev$vcsa(&(0x7f0000000fc0), 0x0, 0x20800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000001000)) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_WAITACTIVE(r8, 0x5607) 07:10:23 executing program 7: r0 = syz_io_uring_setup(0x3361, &(0x7f0000000000)={0x0, 0x9a1f, 0x1, 0x2, 0x2e3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x8000000) io_uring_setup(0x25fc, &(0x7f0000000140)={0x0, 0x9f19, 0x20, 0x1, 0x272, 0x0, r1}) ioctl$CDROMPAUSE(r1, 0x5301) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000001c0)={0x2, 0x100, 0x5a6, 0x7f, 0x5, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x4010, r0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000200), 0x1000000, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) utimensat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{r2, r3/1000+10000}, {0x0, 0xea60}}, 0x100) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000003c0)={0x1, 0x2, 0x9, 0x2, 0x5, 0x8}) r4 = syz_open_dev$vcsu(&(0x7f0000000400), 0x2, 0x204000) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x1ff) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0x0) syz_io_uring_setup(0x6995, &(0x7f0000000440)={0x0, 0x546b, 0x20, 0x2, 0x203, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=0x0) r7 = socket$inet6(0xa, 0x80000, 0x8) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2004, @fd=r7, 0xd3e, 0x9, 0x1, 0x17, 0x0, {0x2}}, 0x20) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x52008000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 07:10:23 executing program 3: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x54}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000140)={@id={0x2, 0x0, @b}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc1}}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x3a1800, 0x0) faccessat2(r0, &(0x7f0000000200)='./file0\x00', 0x8, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000240)={@id={0x2, 0x0, @c}}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000280)=0x1, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x110, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5a}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x118c}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5e9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c005) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0)={0x3, 0x2, 0x20, 0x6, 0x2}, 0x14) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$CDROMRESET(r1, 0x5312) mknodat$loop(r1, &(0x7f0000000540)='./file0\x00', 0x6000, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000580)="37af83c21520d95ff1e05ca637529aeb", 0x10) mknodat$null(r1, &(0x7f00000005c0)='./file0\x00', 0x8, 0x103) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) utimensat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={{0x77359400}}, 0x100) syz_genetlink_get_family_id$fou(&(0x7f00000006c0), r0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x20800, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r2) 07:10:23 executing program 0: ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000000)={0x5, 0x20, 0x58, 0x3, 0x80, 0x6}) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000000a80)) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x40811}, 0x80) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001600), 0x4a0080, 0x0) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000001640)={0x2, 0xf4, 0x4, 0xe, 0x5, 0xff, @lba=0x6, @lba=0xfffffffd}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001680), 0x800, 0x0) ioctl$CDROMEJECT(r0, 0x5309) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f00000016c0)={0x400, 0xffff}) r2 = getuid() fchownat(r0, &(0x7f0000001700)='.\x00', r2, 0xee01, 0x1000) mknodat$null(r1, &(0x7f0000001740)='./file0\x00', 0x200, 0x103) clock_settime(0x5, &(0x7f0000001780)) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f00000017c0)='ns/pid_for_children\x00') r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001800), 0x208000, 0x0) ioctl$CDROMVOLCTRL(r4, 0x530a, &(0x7f0000001840)={0x8, 0x8, 0x98, 0x9}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001880), 0x200080, 0x0) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f00000018c0)={0x6, 0x2, 0x1, 0x6, 0x40, 0x6}) clock_gettime(0x7, &(0x7f0000002340)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002380)='./binderfs2/binder-control\x00', 0x800, 0x0) 07:10:23 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/kcm\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x800000, 0x4, {{0x1b, 0x4, 0x2, 0x3, 0x6c, 0x65, 0x0, 0x1f, 0x4, 0x0, @broadcast, @local, {[@timestamp_addr={0x44, 0x54, 0x99, 0x1, 0x1, [{@loopback, 0x6}, {@rand_addr=0x64010100, 0xd343}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xffff8001}, {@dev={0xac, 0x14, 0x14, 0x2f}}, {@loopback, 0x6}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x9}, {@private=0xa010102}, {@loopback, 0xfffffffc}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', r2, 0x20, 0x700, 0x1, 0x200, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4}]}}}}}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xa1000, 0x0) ioctl$CDROMSETSPINDOWN(r3, 0x531e, &(0x7f0000000280)=0xe) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000002c0)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) ioctl$CDROMREADMODE1(r4, 0x530d, &(0x7f0000000340)={0x7, 0x6, 0x1, 0x40, 0xff, 0xff}) ioctl$CDROM_DISC_STATUS(r4, 0x5327) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2082c0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000e40)={'gretap0\x00', &(0x7f0000000e00)={'syztnl2\x00', r2, 0x10, 0x1, 0x3ff, 0x8, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x67, 0x0, 0x7, 0x0, 0x0, @private=0xa010102, @private=0xa010102}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000f40)={'gre0\x00', &(0x7f0000000e80)={'ip_vti0\x00', r2, 0x10, 0x8000, 0x1ff, 0x400, {{0x22, 0x4, 0x0, 0x9, 0x88, 0x65, 0x0, 0x2, 0x29, 0x0, @empty, @remote, {[@generic={0x94, 0x11, "140e87ded638c106450abc66269362"}, @timestamp_addr={0x44, 0x24, 0x53, 0x1, 0x1, [{@rand_addr=0x64010100, 0x7f}, {@multicast2, 0x80000001}, {@multicast2}, {@local, 0xdb0}]}, @timestamp_addr={0x44, 0x3c, 0x43, 0x1, 0x9, [{@empty, 0x48}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4}, {@multicast1, 0xd1da}, {@broadcast, 0x40}]}]}}}}}) r6 = syz_io_uring_complete(0x0) ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f0000000f80)) r7 = syz_open_dev$vcsa(&(0x7f0000000fc0), 0x0, 0x20800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000001000)) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_WAITACTIVE(r8, 0x5607) 07:10:23 executing program 3: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x54}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000140)={@id={0x2, 0x0, @b}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc1}}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x3a1800, 0x0) faccessat2(r0, &(0x7f0000000200)='./file0\x00', 0x8, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000240)={@id={0x2, 0x0, @c}}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000280)=0x1, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x110, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5a}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x118c}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5e9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c005) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0)={0x3, 0x2, 0x20, 0x6, 0x2}, 0x14) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$CDROMRESET(r1, 0x5312) mknodat$loop(r1, &(0x7f0000000540)='./file0\x00', 0x6000, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000580)="37af83c21520d95ff1e05ca637529aeb", 0x10) mknodat$null(r1, &(0x7f00000005c0)='./file0\x00', 0x8, 0x103) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) utimensat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={{0x77359400}}, 0x100) syz_genetlink_get_family_id$fou(&(0x7f00000006c0), r0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x20800, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r2) 07:10:23 executing program 0: ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000000)={0x5, 0x20, 0x58, 0x3, 0x80, 0x6}) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000000a80)) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x40811}, 0x80) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001600), 0x4a0080, 0x0) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000001640)={0x2, 0xf4, 0x4, 0xe, 0x5, 0xff, @lba=0x6, @lba=0xfffffffd}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001680), 0x800, 0x0) ioctl$CDROMEJECT(r0, 0x5309) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f00000016c0)={0x400, 0xffff}) r2 = getuid() fchownat(r0, &(0x7f0000001700)='.\x00', r2, 0xee01, 0x1000) mknodat$null(r1, &(0x7f0000001740)='./file0\x00', 0x200, 0x103) clock_settime(0x5, &(0x7f0000001780)) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f00000017c0)='ns/pid_for_children\x00') r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001800), 0x208000, 0x0) ioctl$CDROMVOLCTRL(r4, 0x530a, &(0x7f0000001840)={0x8, 0x8, 0x98, 0x9}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001880), 0x200080, 0x0) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f00000018c0)={0x6, 0x2, 0x1, 0x6, 0x40, 0x6}) clock_gettime(0x7, &(0x7f0000002340)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002380)='./binderfs2/binder-control\x00', 0x800, 0x0) [ 183.758532] Bluetooth: hci2: command 0x0406 tx timeout [ 183.759088] Bluetooth: hci0: command 0x0406 tx timeout [ 183.759667] Bluetooth: hci3: command 0x0406 tx timeout 07:10:36 executing program 7: r0 = syz_io_uring_setup(0x3361, &(0x7f0000000000)={0x0, 0x9a1f, 0x1, 0x2, 0x2e3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x8000000) io_uring_setup(0x25fc, &(0x7f0000000140)={0x0, 0x9f19, 0x20, 0x1, 0x272, 0x0, r1}) ioctl$CDROMPAUSE(r1, 0x5301) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000001c0)={0x2, 0x100, 0x5a6, 0x7f, 0x5, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x4010, r0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000200), 0x1000000, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) utimensat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{r2, r3/1000+10000}, {0x0, 0xea60}}, 0x100) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f00000003c0)={0x1, 0x2, 0x9, 0x2, 0x5, 0x8}) r4 = syz_open_dev$vcsu(&(0x7f0000000400), 0x2, 0x204000) ioctl$CDROM_MEDIA_CHANGED(r4, 0x5325, 0x1ff) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r1, 0x0) syz_io_uring_setup(0x6995, &(0x7f0000000440)={0x0, 0x546b, 0x20, 0x2, 0x203, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=0x0) r7 = socket$inet6(0xa, 0x80000, 0x8) syz_io_uring_submit(r5, r6, &(0x7f0000000540)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2004, @fd=r7, 0xd3e, 0x9, 0x1, 0x17, 0x0, {0x2}}, 0x20) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x52008000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 07:10:36 executing program 1: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x268, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0xe6, 0x3, "2dbaf9c7310fb69416d432d54c2ed228281ce204fdc4a3a3c741b0a99790538820c8aaf537841a7f462f25fc823bf4b7d1d486551a3b797d1797e7f14d7f64ccf2096ade5531fc0e851fd40dd8d9691e3c2089286d98bdda78b8cc34d23effa258c3227e6dffea243b7b4eb0a27f43d03cdcba4b0a279617537ef3900df96924c9e4352737e8f23ebe6b34e0b21edc169f38552f8522d5c13a5495cd969b4d689e6e603ce310d1dd4455e566fa4aeeb18fd21b8a1db56eebd84d08bda1efb8f1b1dd287168c27e8a5ca76bad6ccdeb25d96a78bc5f46a8ccd4b3f933bda0432212f6"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "49bd7076bc0722d06e02af5fd3c2ecbab01bc9e2610c"}}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa8b8}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xf0f, @mcast2, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa67}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x538}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9597}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000050}, 0x880) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r0 = syz_io_uring_complete(0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) ioctl$CDROMRESUME(r0, 0x5302) ioctl$CDROMREADALL(r0, 0x5318, &(0x7f0000000440)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ec0)='sched\x00') r3 = syz_io_uring_complete(r1) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xbf}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ee5497d}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff00}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f00000011c0)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x6, 0x10000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x6, 0x7d, 0x0, @loopback, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001240)={'syztnl2\x00', r5, 0x1, 0x8000, 0x200, 0x0, {{0x23, 0x4, 0x1, 0x35, 0x8c, 0x68, 0x0, 0x5, 0x29, 0x0, @loopback, @private=0xa010102, {[@cipso={0x86, 0x56, 0x2, [{0x1, 0x4, "e543"}, {0x1, 0x3, "85"}, {0x2, 0x4, '`Q'}, {0x2, 0x7, "a3a242e375"}, {0x1, 0x10, "89e8a280bdbe39707ecc486741fa"}, {0x7, 0x12, "7aab94ce569279a6c7ee8c253be80308"}, {0x2, 0x12, "77258357caa1fa53c05435720e5b3128"}, {0x7, 0xa, "fd9854dcd0a0abc7"}]}, @ssrr={0x89, 0x17, 0x58, [@remote, @empty, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x3}, @end]}}}}}) sendmsg$FOU_CMD_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, 0x0, 0x121, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r6, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) 07:10:36 executing program 2: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x2e1c, &(0x7f00000001c0)={0x0, 0x4c25, 0x1, 0x0, 0x1d7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r2, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x2}}, 0x5) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000340)) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x2000c080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40800}, 0x44085) getgroups(0x6, &(0x7f0000000840)=[0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0x0]) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000880), 0x10002, 0x0) ioctl$CDROMSTOP(r5, 0x5307) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$CDROMSUBCHNL(r6, 0x530b, &(0x7f0000000900)={0x1, 0x1, 0x7, 0xd, 0x9, 0xfa, @lba=0x401, @msf={0x9, 0x3, 0x3}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000940), 0x20000, 0x0) socketpair(0x22, 0x3, 0x8, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_DEST(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x14}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfea}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004800) 07:10:36 executing program 0: ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000000)={0x5, 0x20, 0x58, 0x3, 0x80, 0x6}) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000000a80)) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001500), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x40811}, 0x80) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001600), 0x4a0080, 0x0) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000001640)={0x2, 0xf4, 0x4, 0xe, 0x5, 0xff, @lba=0x6, @lba=0xfffffffd}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001680), 0x800, 0x0) ioctl$CDROMEJECT(r0, 0x5309) ioctl$CDROMPLAYBLK(r0, 0x5317, &(0x7f00000016c0)={0x400, 0xffff}) r2 = getuid() fchownat(r0, &(0x7f0000001700)='.\x00', r2, 0xee01, 0x1000) mknodat$null(r1, &(0x7f0000001740)='./file0\x00', 0x200, 0x103) clock_settime(0x5, &(0x7f0000001780)) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f00000017c0)='ns/pid_for_children\x00') r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001800), 0x208000, 0x0) ioctl$CDROMVOLCTRL(r4, 0x530a, &(0x7f0000001840)={0x8, 0x8, 0x98, 0x9}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001880), 0x200080, 0x0) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f00000018c0)={0x6, 0x2, 0x1, 0x6, 0x40, 0x6}) clock_gettime(0x7, &(0x7f0000002340)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000002380)='./binderfs2/binder-control\x00', 0x800, 0x0) 07:10:36 executing program 3: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x54}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000140)={@id={0x2, 0x0, @b}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc1}}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x3a1800, 0x0) faccessat2(r0, &(0x7f0000000200)='./file0\x00', 0x8, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000240)={@id={0x2, 0x0, @c}}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000280)=0x1, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x110, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5a}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x118c}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5e9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c005) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0)={0x3, 0x2, 0x20, 0x6, 0x2}, 0x14) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$CDROMRESET(r1, 0x5312) mknodat$loop(r1, &(0x7f0000000540)='./file0\x00', 0x6000, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000580)="37af83c21520d95ff1e05ca637529aeb", 0x10) mknodat$null(r1, &(0x7f00000005c0)='./file0\x00', 0x8, 0x103) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) utimensat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={{0x77359400}}, 0x100) syz_genetlink_get_family_id$fou(&(0x7f00000006c0), r0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x20800, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r2) 07:10:36 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/kcm\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8000, 0x8, 0x800000, 0x4, {{0x1b, 0x4, 0x2, 0x3, 0x6c, 0x65, 0x0, 0x1f, 0x4, 0x0, @broadcast, @local, {[@timestamp_addr={0x44, 0x54, 0x99, 0x1, 0x1, [{@loopback, 0x6}, {@rand_addr=0x64010100, 0xd343}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xffff8001}, {@dev={0xac, 0x14, 0x14, 0x2f}}, {@loopback, 0x6}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x9}, {@private=0xa010102}, {@loopback, 0xfffffffc}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000001c0)={'ip_vti0\x00', r2, 0x20, 0x700, 0x1, 0x200, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4}]}}}}}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0xa1000, 0x0) ioctl$CDROMSETSPINDOWN(r3, 0x531e, &(0x7f0000000280)=0xe) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000002c0)) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) ioctl$CDROMREADMODE1(r4, 0x530d, &(0x7f0000000340)={0x7, 0x6, 0x1, 0x40, 0xff, 0xff}) ioctl$CDROM_DISC_STATUS(r4, 0x5327) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2082c0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000e40)={'gretap0\x00', &(0x7f0000000e00)={'syztnl2\x00', r2, 0x10, 0x1, 0x3ff, 0x8, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x67, 0x0, 0x7, 0x0, 0x0, @private=0xa010102, @private=0xa010102}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000f40)={'gre0\x00', &(0x7f0000000e80)={'ip_vti0\x00', r2, 0x10, 0x8000, 0x1ff, 0x400, {{0x22, 0x4, 0x0, 0x9, 0x88, 0x65, 0x0, 0x2, 0x29, 0x0, @empty, @remote, {[@generic={0x94, 0x11, "140e87ded638c106450abc66269362"}, @timestamp_addr={0x44, 0x24, 0x53, 0x1, 0x1, [{@rand_addr=0x64010100, 0x7f}, {@multicast2, 0x80000001}, {@multicast2}, {@local, 0xdb0}]}, @timestamp_addr={0x44, 0x3c, 0x43, 0x1, 0x9, [{@empty, 0x48}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x4}, {@multicast1, 0xd1da}, {@broadcast, 0x40}]}]}}}}}) r6 = syz_io_uring_complete(0x0) ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f0000000f80)) r7 = syz_open_dev$vcsa(&(0x7f0000000fc0), 0x0, 0x20800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000001000)) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_WAITACTIVE(r8, 0x5607) 07:10:36 executing program 5: prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f00000000c0)={@lba=0x8, 0x1, 0x5, &(0x7f0000000080)=""/5}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f0000000140)={0x2, 0x24, 0x4, 0x3, 0x0, 0x4, @msf={0x3, 0xff, 0x4}, @msf={0x8, 0x6, 0x9}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0) unlinkat(r2, &(0x7f00000001c0)='./file0\x00', 0x200) wait4(0x0, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf4, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@loopback, @in6=@empty}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe8) r4 = syz_io_uring_complete(0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r1, 0x103, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) r5 = syz_open_dev$vcsa(&(0x7f0000000740), 0x3f, 0x600) fchmodat(r5, &(0x7f0000000780)='./file0\x00', 0x2e) ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, &(0x7f0000000800)={@lba=0x80, 0x1, 0x3}) 07:10:36 executing program 4: faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/192, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80) mknodat(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x8000, 0x10000) faccessat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8, 0x1100) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x100, 0x84, 0x16}, 0x18) fchmodat(r0, &(0x7f0000000280)='./file0\x00', 0x80) utimensat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{}, {0x0, 0xea60}}, 0x100) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x509000, 0x104, 0x18}, 0x18) mknodat$null(r1, &(0x7f00000003c0)='./file0\x00', 0x2, 0x103) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000400)) mknodat(r0, &(0x7f0000000440)='./file0/file0\x00', 0x4, 0x4) mknodat$null(r1, &(0x7f0000000480)='./file0/file0\x00', 0xc000, 0x103) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x40, 0x0, 0x1}, 0x18) unlinkat(r3, &(0x7f0000000540)='./file0/file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip_vs\x00') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000840)={&(0x7f00000005c0), 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x188, r5, 0x11, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xde68}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x982}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x90}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$CDROMSEEK(r4, 0x5316, &(0x7f0000000880)={0x8, 0x7, 0x7, 0x3, 0x3, 0x2}) 07:10:36 executing program 5: prctl$PR_GET_IO_FLUSHER(0x3a) prctl$PR_GET_IO_FLUSHER(0x3a) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f00000000c0)={@lba=0x8, 0x1, 0x5, &(0x7f0000000080)=""/5}) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f0000000140)={0x2, 0x24, 0x4, 0x3, 0x0, 0x4, @msf={0x3, 0xff, 0x4}, @msf={0x8, 0x6, 0x9}}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0) unlinkat(r2, &(0x7f00000001c0)='./file0\x00', 0x200) wait4(0x0, &(0x7f0000000200), 0x20000000, &(0x7f0000000240)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf4, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@loopback, @in6=@empty}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0xe8) r4 = syz_io_uring_complete(0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r1, 0x103, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x32}}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) r5 = syz_open_dev$vcsa(&(0x7f0000000740), 0x3f, 0x600) fchmodat(r5, &(0x7f0000000780)='./file0\x00', 0x2e) ioctl$CDROMMULTISESSION(0xffffffffffffffff, 0x5310, &(0x7f0000000800)={@lba=0x80, 0x1, 0x3}) [ 187.855047] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.856716] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.858082] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.860607] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.862501] Call Trace: [ 187.863018] [ 187.863522] __schedule+0x893/0x2470 [ 187.864285] ? io_schedule_timeout+0x150/0x150 [ 187.865207] ? do_raw_spin_lock+0x121/0x260 [ 187.866108] ? rwlock_bug.part.0+0x90/0x90 [ 187.866992] schedule+0xda/0x1b0 [ 187.867719] rescuer_thread+0x851/0xdb0 [ 187.868545] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.869556] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.870550] ? lockdep_hardirqs_on+0x79/0x100 [ 187.871404] ? worker_thread+0x1260/0x1260 [ 187.872235] kthread+0x2ed/0x3a0 [ 187.872947] ? kthread_complete_and_exit+0x40/0x40 [ 187.873947] ret_from_fork+0x22/0x30 [ 187.874759] [ 187.875220] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.876468] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.877524] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.878977] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.880559] Call Trace: [ 187.880951] [ 187.881282] __schedule+0x893/0x2470 [ 187.881877] ? io_schedule_timeout+0x150/0x150 [ 187.882550] ? do_raw_spin_lock+0x121/0x260 [ 187.883169] ? rwlock_bug.part.0+0x90/0x90 [ 187.883804] schedule+0xda/0x1b0 [ 187.884296] rescuer_thread+0x851/0xdb0 [ 187.884887] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.885616] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.886313] ? lockdep_hardirqs_on+0x79/0x100 [ 187.886976] ? worker_thread+0x1260/0x1260 [ 187.887604] kthread+0x2ed/0x3a0 [ 187.888105] ? kthread_complete_and_exit+0x40/0x40 [ 187.888816] ret_from_fork+0x22/0x30 [ 187.889401] [ 187.889754] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.890676] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.891426] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.892481] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.893665] Call Trace: [ 187.894024] [ 187.894372] __schedule+0x893/0x2470 [ 187.894928] ? io_schedule_timeout+0x150/0x150 [ 187.895592] ? do_raw_spin_lock+0x121/0x260 [ 187.896209] ? rwlock_bug.part.0+0x90/0x90 [ 187.896842] schedule+0xda/0x1b0 [ 187.897332] rescuer_thread+0x851/0xdb0 [ 187.897925] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.898629] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.899303] ? lockdep_hardirqs_on+0x79/0x100 [ 187.899935] ? worker_thread+0x1260/0x1260 [ 187.900536] kthread+0x2ed/0x3a0 [ 187.901001] ? kthread_complete_and_exit+0x40/0x40 [ 187.901718] ret_from_fork+0x22/0x30 [ 187.902250] [ 187.902600] INFO: task netns:6 blocked for more than 143 seconds. [ 187.903428] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.904125] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.905145] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.906265] Call Trace: [ 187.906644] [ 187.906960] __schedule+0x893/0x2470 [ 187.907511] ? io_schedule_timeout+0x150/0x150 [ 187.908156] ? do_raw_spin_lock+0x121/0x260 [ 187.908805] ? rwlock_bug.part.0+0x90/0x90 [ 187.909475] schedule+0xda/0x1b0 [ 187.909974] rescuer_thread+0x851/0xdb0 [ 187.910570] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.911282] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.912022] ? lockdep_hardirqs_on+0x79/0x100 [ 187.912681] ? worker_thread+0x1260/0x1260 [ 187.913282] kthread+0x2ed/0x3a0 [ 187.913807] ? kthread_complete_and_exit+0x40/0x40 [ 187.914523] ret_from_fork+0x22/0x30 [ 187.915075] [ 187.915433] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.916368] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.917109] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.918222] task:kworker/0:0H state:I stack:29464 pid:8 ppid:2 flags:0x00004000 [ 187.919402] Workqueue: 0x0 (kblockd) [ 187.919955] Call Trace: [ 187.920315] [ 187.920666] __schedule+0x893/0x2470 [ 187.921208] ? io_schedule_timeout+0x150/0x150 [ 187.921923] schedule+0xda/0x1b0 [ 187.922443] worker_thread+0x15f/0x1260 [ 187.923041] ? process_one_work+0x16a0/0x16a0 [ 187.923710] kthread+0x2ed/0x3a0 [ 187.924209] ? kthread_complete_and_exit+0x40/0x40 [ 187.924933] ret_from_fork+0x22/0x30 [ 187.925524] [ 187.925870] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.926819] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.927586] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.928654] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.929845] Call Trace: [ 187.930209] [ 187.930564] __schedule+0x893/0x2470 [ 187.931112] ? io_schedule_timeout+0x150/0x150 [ 187.931802] ? do_raw_spin_lock+0x121/0x260 [ 187.932444] ? rwlock_bug.part.0+0x90/0x90 [ 187.933063] schedule+0xda/0x1b0 [ 187.933769] rescuer_thread+0x851/0xdb0 [ 187.934384] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.935100] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.935944] ? lockdep_hardirqs_on+0x79/0x100 [ 187.936605] ? worker_thread+0x1260/0x1260 [ 187.937501] kthread+0x2ed/0x3a0 [ 187.938078] ? kthread_complete_and_exit+0x40/0x40 [ 187.938826] ret_from_fork+0x22/0x30 [ 187.939406] [ 187.939750] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.940747] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.941530] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.942559] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.943685] Call Trace: [ 187.944037] [ 187.944377] __schedule+0x893/0x2470 [ 187.944907] ? io_schedule_timeout+0x150/0x150 [ 187.945561] ? mark_held_locks+0x9e/0xe0 [ 187.946129] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.946831] schedule+0xda/0x1b0 [ 187.947301] rcu_tasks_one_gp+0x3db/0xc10 [ 187.947919] rcu_tasks_kthread+0x80/0xa0 [ 187.948504] ? rcu_tasks_postscan+0x10/0x10 [ 187.949092] kthread+0x2ed/0x3a0 [ 187.949592] ? kthread_complete_and_exit+0x40/0x40 [ 187.950256] ret_from_fork+0x22/0x30 [ 187.950825] [ 187.951145] INFO: task kworker/0:1:12 blocked for more than 143 seconds. [ 187.952053] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.952806] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.953890] task:kworker/0:1 state:I stack:28696 pid:12 ppid:2 flags:0x00004000 [ 187.955050] Workqueue: 0x0 (events) [ 187.955612] Call Trace: [ 187.955975] [ 187.956308] __schedule+0x893/0x2470 [ 187.956884] ? io_schedule_timeout+0x150/0x150 [ 187.957568] ? rwlock_bug.part.0+0x90/0x90 [ 187.958176] schedule+0xda/0x1b0 [ 187.958717] worker_thread+0x15f/0x1260 [ 187.959302] ? __kthread_parkme+0x15a/0x220 [ 187.959933] ? process_one_work+0x16a0/0x16a0 [ 187.960601] kthread+0x2ed/0x3a0 [ 187.961078] ? kthread_complete_and_exit+0x40/0x40 [ 187.961803] ret_from_fork+0x22/0x30 [ 187.962391] [ 187.962755] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.963719] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.964556] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.965662] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 187.966822] Workqueue: 0x0 (events_highpri) [ 187.967479] Call Trace: [ 187.967831] [ 187.968156] __schedule+0x893/0x2470 [ 187.968708] ? io_schedule_timeout+0x150/0x150 [ 187.969366] schedule+0xda/0x1b0 [ 187.969853] worker_thread+0x15f/0x1260 [ 187.970444] ? process_one_work+0x16a0/0x16a0 [ 187.971069] kthread+0x2ed/0x3a0 [ 187.971563] ? kthread_complete_and_exit+0x40/0x40 [ 187.972247] ret_from_fork+0x22/0x30 [ 187.972832] [ 187.973163] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 187.974105] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.974856] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.975915] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 187.977073] Call Trace: [ 187.977483] [ 187.977828] __schedule+0x893/0x2470 [ 187.978402] ? io_schedule_timeout+0x150/0x150 [ 187.979162] ? do_raw_spin_lock+0x121/0x260 [ 187.980059] ? rwlock_bug.part.0+0x90/0x90 [ 187.981001] schedule+0xda/0x1b0 [ 187.981742] rescuer_thread+0x851/0xdb0 [ 187.982570] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.983551] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.984558] ? lockdep_hardirqs_on+0x79/0x100 [ 187.985501] ? worker_thread+0x1260/0x1260 [ 187.986321] kthread+0x2ed/0x3a0 [ 187.987043] ? kthread_complete_and_exit+0x40/0x40 [ 187.988022] ret_from_fork+0x22/0x30 [ 187.988833] [ 187.989409] [ 187.989409] Showing all locks held in the system: [ 187.990315] 1 lock held by rcu_tasks_kthre/11: [ 187.990965] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.992288] 1 lock held by khungtaskd/25: [ 187.992869] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.994260] 1 lock held by systemd-journal/111: [ 187.995056] 1 lock held by in:imklog/192: [ 187.995753] #0: ffff88800d7360e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fget_files+0x0/0x450 [ 187.997179] 3 locks held by syz-executor/6274: [ 187.997962] [ 187.998253] ============================================= [ 187.998253] VM DIAGNOSIS: 07:10:39 Registers: info registers vcpu 0 RAX=ffff888015fa5040 RBX=ffff88807604c5b0 RCX=ffffffff817bd091 RDX=1ffff11002bf4a08 RSI=0000000000000008 RDI=ffff888015fa5040 RBP=dffffc0000000000 RSP=ffff8880384a7a98 R8 =0000000000000000 R9 =ffff888015fa5047 R10=ffffed1002bf4a08 R11=0000000000000001 R12=ffff88807604cff9 R13=ffff888015fa5040 R14=ffffffffffffffff R15=0000000000000086 RIP=ffffffff817854b0 RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555c22400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005593467aa754 CR3=0000000027ba8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 410596c000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 3fc4d076b7feff69 YMM05=0000000000000000 0000000000000000 000000c000000600 000000c000012000 YMM06=0000000000000000 0000000000000000 0000000000000000 3fd3333333333333 YMM07=0000000000000000 0000000000000000 0000000000000000 3fd007d7ff50a249 YMM08=0000000000000000 0000000000000000 0000000000000000 3fd5a674e57b44e4 YMM09=0000000000000000 0000000000000000 0000000000000000 3f763ee968837700 YMM10=0000000000000000 0000000000000000 0000000000000000 3fc5650d804d91f0 YMM11=0000000000000000 0000000000000000 000000c000000180 000000c00030e930 YMM12=0000000000000000 0000000000000000 000000c0006e0200 000000c0006e2840 YMM13=0000000000000000 0000000000000000 000000c0056e94a0 000000c0056e8de0 YMM14=0000000000000000 0000000000000000 000000c005802240 000000c0056e9b60 YMM15=0000000000000000 0000000000000000 000000c00580a340 000000c005802900 info registers vcpu 1 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902fa18 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000005 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff5179d080 CR3=0000000027ba8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 652e29646e616d6d 6f632a282e637069 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 5f4f495f5445475f 5250246c74637270 YMM05=0000000000000000 0000000000000000 2e273d2930383730 3030303030306637 YMM06=0000000000000000 0000000000000000 327830202c273030 785c30656c69662f YMM07=0000000000000000 0000000000000000 554d4d4f52444324 6c74636f690a2965 YMM08=0000000000000000 0000000000000000 6666667830284e4f 495353455349544c YMM09=0000000000000000 0000000000000000 30202c6666666666 6666666666666666 YMM10=0000000000000000 0000000000000000 3030306637783028 26202c3031333578 YMM11=0000000000000000 0000000000000000 303d61626c407b3d 2930303830303030 YMM12=0000000000000000 0000000000000000 0a297d337830202c 317830202c303878 YMM13=0000000000000000 0000000000000000 317830202c367830 202c666666666666 YMM14=0000000000000000 0000000000000000 3030303030303066 3778302826202c35 YMM15=0000000000000000 0000000000000000 203d2030720a2934 7830202c29303030