Warning: Permanently added '[localhost]:21362' (ECDSA) to the list of known hosts. 2022/10/03 18:24:37 fuzzer started 2022/10/03 18:24:37 dialing manager at localhost:35095 syzkaller login: [ 44.684411] cgroup: Unknown subsys name 'net' [ 44.798900] cgroup: Unknown subsys name 'rlimit' 2022/10/03 18:24:52 syscalls: 200 2022/10/03 18:24:52 code coverage: enabled 2022/10/03 18:24:52 comparison tracing: enabled 2022/10/03 18:24:52 extra coverage: enabled 2022/10/03 18:24:52 setuid sandbox: enabled 2022/10/03 18:24:52 namespace sandbox: enabled 2022/10/03 18:24:52 Android sandbox: enabled 2022/10/03 18:24:52 fault injection: enabled 2022/10/03 18:24:52 leak checking: enabled 2022/10/03 18:24:52 net packet injection: enabled 2022/10/03 18:24:52 net device setup: enabled 2022/10/03 18:24:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 18:24:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 18:24:52 USB emulation: enabled 2022/10/03 18:24:52 hci packet injection: enabled 2022/10/03 18:24:52 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 18:24:52 802.15.4 emulation: enabled 2022/10/03 18:24:52 fetching corpus: 0, signal 0/0 (executing program) 2022/10/03 18:24:53 starting 8 fuzzer processes 18:24:53 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2090020, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}, {@msize}, {@cache_loose}], [{@subj_role}]}}) r2 = accept(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/80, 0x50, 0x0, &(0x7f0000000300)=""/104, 0x68}, &(0x7f00000003c0)=0x40) ioctl$TCSBRK(r0, 0x5409, 0x5) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000400)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_vlan\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ah\x00'}, &(0x7f00000004c0)=0x1e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000500)={0x8, 0x5b85, 0x5c6, 0xe12, 0xe, "3ed8773e8841e819"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000540)={0xf31, 0x8, 0x5, 0x2, 0x18, "e2075c094dd4015a"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x7fff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000005c0)={0x9, 0x2, 0x3}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x80020, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@fscache}], [{@obj_user={'obj_user', 0x3d, '^&.'}}]}}) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x2010, r0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x3028b8f51fb1a0df, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r5, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000740)=0x1) 18:24:53 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x126, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x800) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x402200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000006c0)={0x401, 0x0, 0x6, 0x7, 0x1000}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000800)={0x6, 0x65, 0x4}) r8 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080) 18:24:53 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x1c040) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x3f, 0x21, 0xc0}, {0x8, 0x5a, 0x20, 0x3}, {0x7, 0x2, 0x4, 0x81}]}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xe993) r2 = pidfd_getfd(r0, r0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x14) r4 = socket(0x1a, 0x1, 0x7) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r4) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r4) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c041}, 0x4000000) r7 = gettid() setpgid(r7, 0x0) r8 = pidfd_getfd(r6, r1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r8) 18:24:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x87}]}, 0x64}}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x1c0d05b71b5ff9d3) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x20000840) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x80c1) socketpair(0x0, 0x800, 0x9, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r6) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x8010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000015}, 0x40000) [ 59.942430] audit: type=1400 audit(1664821493.466:6): avc: denied { execmem } for pid=288 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:24:53 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xe0, 0x5e, 0x6, @remote, @local, 0x1, 0x1, 0x80000001, 0x83}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x7f, 0x2, 0x20, 0x20, 0x2, r1}, {0x2, 0x5, 0x6, 0x9, 0x1, 0x2, 0x5, 0x1}, {0x8, 0x3, 0x7ff, 0xfffffffffffffffa}, 0x7, 0x6e6bb2, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x3504, 0x3, 0x2, 0x1, 0x401, 0x8a, 0x89d}}, 0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000340)={0x33, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x20, [0xfffffffffffffff8, 0x9, 0x6]}}]}, 0x30) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x4, 0x7, 0xfffffffb, 0x4d, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x20, 0x1, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @loopback, 0x0, 0xf750, 0x4, 0x500, 0xffffffffffffff0e, 0x8600002, r2}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', r3, 0x2f, 0xf9, 0x6, 0x40, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x10, 0x0, 0x2}}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000006c0)) r5 = accept(r0, 0x0, &(0x7f0000000700)) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000740)={0x1, 0x1, 0x9, 0x9, 0x4}, 0xc) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000780)=0x3) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000007c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x6, 0x1b04cf0a, 0x0, 0x5, 0x4}, 0x5) r7 = accept4$inet6(r5, &(0x7f0000000800)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000840)=0x1c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000880)={{{@in, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r5) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0x9}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}}, 0x4001) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000b00)={@loopback, @empty, @empty, 0x2, 0x4, 0x1, 0x500, 0x9, 0x80000002, r4}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x311) 18:24:53 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="551fb808cd6bf8f124ea26c742c49986d132d5abb15a774761de358266ac1672d20490e08c33933a559e016d7b8254822a6a8eca65a373632526094c60cb91ca9cab436fa026cb54a0e13f283815cf6e49c19cfcf6d812790609af61018b9ac5ce1b82cb016e7eca750a824545f6d9ae1137514b63df0e727a9a75f160fc4355882043be8d35c752e4fe55e28715d39f961d3d82b5a4a9fac95333ec1328e7049665f43affd7566ed2250075cec72b483fdec4397f7552aa6c5cff69e7aea1323e938a1a004f6a41fb34f43cc5ca24297a2477333d77028ed3fb55935e6841954100b5390c0ce8f436be42f411c8b93b27392301c64480280f91c30b538977b3ab9e6189eef25bf18bed14f0fc2bebc3f25defa9c804a4fb0dcc6717086429a97543c39d3bb966e842c7f4146a427cbecd1a213574714dd4cbd566420bb92270917f1ed245bed24bcf7cbb41ebffb448b067445e9059ec254bcbecdf3b0330df759f0c54a483253fa42b34ec4ae9eb7260439c24e81fe2aff14f07338df19b0a0a6043f55844b909c92ae96f03bb63531b58aaf388bd67e3efb60d5f717c1c1a0ac2ce797d06d7e8ee28100b50f3757348ed5445733fd2f0de35e58933a14d48d8b2492cec2e4d8c98885ca18e681c49a02d78bf473ac817587e84657d8f0cd312902caee41ddf78dccf5e98fddf118ea237664fa47adc29757a6cebc55f265f0c3fa017df9e0599c44064e314f5254a8b1d218436c09316b29500929ff78e410f17a1e00c212109691a2934968db3850b4a0bcea2d5ba9efce695235ce1afaa8729a07950889f646dbde9d0a0e71433b9eb90c906acff54ff24b31b157d5c0968687012c9894a110f72922fa4d48a01114b4bbeaf1cca871ddaad9a99605cbe77f02428587b59384ef3bd82b6e273c574982aa999cca7de30d376493b948500ff5fc74b1a531208c42ede457441eb66dca7bec4519080def19e8a1296ebb9438fcab856b3f20a47fb607b2a7f0d4f5f7f29fead0bfba0c8270e79bd9dd1bda46ae3ec06f50f8dad16ae610b7b502ea2f05012e1528e18a9cb0fbc72c0e5e4a7f397716627fbe9af4e76ef3bb3f1a8653dd1781f8d314871f6c4aa4b92b62764de153821d3a0028f4aa6d2c55dc3200865864bdf580eb0f504beae889cd823f585c08318da8acaf15d3edaa6eb161cd7e3aa2a67bed0b0aef631c83d5a189abfd11a747fbb619e8b421314b04701404e67571239166e8557dd77899b94cd7eff45d4e8867715050c4e12ef18dc161f2ad89926999aa54f240eb436c83cd8520545936b70676b17765aec156249f0dc356843bd58a406795ed3b10e1949a5206006e9fb634777d02409258bd4fc825e1a872cefa07596a2fc960294091c1b185ac0c31e56f1c5046af3117e7d780125d9fd15d774c35df27d63230dd288976b39"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="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"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_pts(r2, 0x480) r4 = accept(0xffffffffffffffff, &(0x7f0000000b80)=@ax25={{0x3, @netrom}, [@default, @netrom, @remote, @default, @default, @remote, @rose, @null]}, &(0x7f0000000c00)=0x80) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000c40)=0x80000000, 0x4) r5 = socket(0x15, 0x5, 0x8a3) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@local, @in6=@local}}, {{}, 0x0, @in6}}, &(0x7f0000000d80)=0xe8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000e00)) 18:24:53 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) setresgid(r2, r7, r8) pselect6(0x40, &(0x7f0000000640)={0x80000001, 0x1, 0x6, 0x5269, 0x6, 0x6, 0x9, 0x173f000000000000}, &(0x7f0000000680)={0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0x7, 0x4, 0x81, 0xfffffffffffff000}, &(0x7f00000006c0)={0x33f, 0x4, 0xc2, 0x9, 0x9fb2, 0x670, 0x4, 0x2}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0x1]}, 0x8}) getuid() geteuid() openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:24:53 executing program 7: r0 = socket(0x3, 0x4, 0xd398) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x40055) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x6) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0xe02, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}}, 0x2000000) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x1, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@cache_fscache}, {@cache_mmap}, {@uname={'uname', 0x3d, '\x16)@+#/^'}}, {@cache_mmap}, {@posixacl}, {@loose}], [{@permit_directio}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r4}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x40000, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@euid_eq={'euid', 0x3d, r4}}]}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4094) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x22a900, 0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000, 0x0) mount_setattr(r8, &(0x7f0000000880)='./file0\x00', 0x800, &(0x7f0000000900)={0x10000a, 0xfe, 0x0, {r9}}, 0x20) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x30, r8, 0x101) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4044090) [ 61.192010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.194864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.196672] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.198059] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.199670] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.201246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.205094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.206441] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.208820] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.209967] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.215544] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.216802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.223103] Bluetooth: hci0: HCI_REQ-0x0c1a [ 61.224417] Bluetooth: hci1: HCI_REQ-0x0c1a [ 61.284014] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.286271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.287728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.289545] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.295262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.300945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.302791] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.308017] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.309766] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.311394] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.312942] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.314800] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.316618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.318006] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.319305] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.320923] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.322138] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.323670] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.337541] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.340482] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.341774] Bluetooth: hci4: HCI_REQ-0x0c1a [ 61.342959] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.344290] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.346602] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 61.346633] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.348902] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.349038] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.356615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.365153] Bluetooth: hci6: HCI_REQ-0x0c1a [ 61.366430] Bluetooth: hci7: HCI_REQ-0x0c1a [ 61.367138] Bluetooth: hci5: HCI_REQ-0x0c1a [ 61.419691] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.437596] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.444610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.454514] Bluetooth: hci3: HCI_REQ-0x0c1a [ 63.274390] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 63.276365] Bluetooth: hci0: command 0x0409 tx timeout [ 63.276380] Bluetooth: hci1: command 0x0409 tx timeout [ 63.402499] Bluetooth: hci6: command 0x0409 tx timeout [ 63.402640] Bluetooth: hci7: command 0x0409 tx timeout [ 63.403358] Bluetooth: hci5: command 0x0409 tx timeout [ 63.466440] Bluetooth: hci3: command 0x0409 tx timeout [ 63.467411] Bluetooth: hci4: command 0x0409 tx timeout [ 65.322728] Bluetooth: hci0: command 0x041b tx timeout [ 65.323620] Bluetooth: hci1: command 0x041b tx timeout [ 65.450758] Bluetooth: hci7: command 0x041b tx timeout [ 65.450780] Bluetooth: hci5: command 0x041b tx timeout [ 65.451607] Bluetooth: hci6: command 0x041b tx timeout [ 65.514459] Bluetooth: hci3: command 0x041b tx timeout [ 65.514472] Bluetooth: hci4: command 0x041b tx timeout [ 65.956016] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.961430] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.964746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.989520] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.994185] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.003803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.009396] Bluetooth: hci2: HCI_REQ-0x0c1a [ 67.370425] Bluetooth: hci1: command 0x040f tx timeout [ 67.371653] Bluetooth: hci0: command 0x040f tx timeout [ 67.498505] Bluetooth: hci5: command 0x040f tx timeout [ 67.499285] Bluetooth: hci7: command 0x040f tx timeout [ 67.500140] Bluetooth: hci6: command 0x040f tx timeout [ 67.562421] Bluetooth: hci4: command 0x040f tx timeout [ 67.563610] Bluetooth: hci3: command 0x040f tx timeout [ 68.074442] Bluetooth: hci2: command 0x0409 tx timeout [ 69.419068] Bluetooth: hci0: command 0x0419 tx timeout [ 69.419701] Bluetooth: hci1: command 0x0419 tx timeout [ 69.546407] Bluetooth: hci6: command 0x0419 tx timeout [ 69.546857] Bluetooth: hci7: command 0x0419 tx timeout [ 69.547246] Bluetooth: hci5: command 0x0419 tx timeout [ 69.610421] Bluetooth: hci3: command 0x0419 tx timeout [ 69.610863] Bluetooth: hci4: command 0x0419 tx timeout [ 70.122361] Bluetooth: hci2: command 0x041b tx timeout [ 72.170366] Bluetooth: hci2: command 0x040f tx timeout [ 74.218473] Bluetooth: hci2: command 0x0419 tx timeout 18:25:47 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) setresgid(r2, r7, r8) pselect6(0x40, &(0x7f0000000640)={0x80000001, 0x1, 0x6, 0x5269, 0x6, 0x6, 0x9, 0x173f000000000000}, &(0x7f0000000680)={0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0x7, 0x4, 0x81, 0xfffffffffffff000}, &(0x7f00000006c0)={0x33f, 0x4, 0xc2, 0x9, 0x9fb2, 0x670, 0x4, 0x2}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0x1]}, 0x8}) getuid() geteuid() openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:25:47 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) setresgid(r2, r7, r8) pselect6(0x40, &(0x7f0000000640)={0x80000001, 0x1, 0x6, 0x5269, 0x6, 0x6, 0x9, 0x173f000000000000}, &(0x7f0000000680)={0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0x7, 0x4, 0x81, 0xfffffffffffff000}, &(0x7f00000006c0)={0x33f, 0x4, 0xc2, 0x9, 0x9fb2, 0x670, 0x4, 0x2}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0x1]}, 0x8}) getuid() geteuid() openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:25:47 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) setresgid(r2, r7, r8) pselect6(0x40, &(0x7f0000000640)={0x80000001, 0x1, 0x6, 0x5269, 0x6, 0x6, 0x9, 0x173f000000000000}, &(0x7f0000000680)={0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0x7, 0x4, 0x81, 0xfffffffffffff000}, &(0x7f00000006c0)={0x33f, 0x4, 0xc2, 0x9, 0x9fb2, 0x670, 0x4, 0x2}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0x1]}, 0x8}) getuid() geteuid() openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:25:47 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) setresgid(r2, r7, r8) pselect6(0x40, &(0x7f0000000640)={0x80000001, 0x1, 0x6, 0x5269, 0x6, 0x6, 0x9, 0x173f000000000000}, &(0x7f0000000680)={0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0x7, 0x4, 0x81, 0xfffffffffffff000}, &(0x7f00000006c0)={0x33f, 0x4, 0xc2, 0x9, 0x9fb2, 0x670, 0x4, 0x2}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0x1]}, 0x8}) getuid() geteuid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:25:47 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x1c040) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x3f, 0x21, 0xc0}, {0x8, 0x5a, 0x20, 0x3}, {0x7, 0x2, 0x4, 0x81}]}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xe993) r2 = pidfd_getfd(r0, r0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x14) r4 = socket(0x1a, 0x1, 0x7) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r4) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r4) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c041}, 0x4000000) r7 = gettid() setpgid(r7, 0x0) r8 = pidfd_getfd(r6, r1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r8) 18:25:47 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) setresgid(r2, r7, r8) pselect6(0x40, &(0x7f0000000640)={0x80000001, 0x1, 0x6, 0x5269, 0x6, 0x6, 0x9, 0x173f000000000000}, &(0x7f0000000680)={0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0x7, 0x4, 0x81, 0xfffffffffffff000}, &(0x7f00000006c0)={0x33f, 0x4, 0xc2, 0x9, 0x9fb2, 0x670, 0x4, 0x2}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0x1]}, 0x8}) getuid() geteuid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:25:48 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) setresgid(r2, r7, r8) pselect6(0x40, &(0x7f0000000640)={0x80000001, 0x1, 0x6, 0x5269, 0x6, 0x6, 0x9, 0x173f000000000000}, &(0x7f0000000680)={0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0x7, 0x4, 0x81, 0xfffffffffffff000}, &(0x7f00000006c0)={0x33f, 0x4, 0xc2, 0x9, 0x9fb2, 0x670, 0x4, 0x2}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0x1]}, 0x8}) getuid() geteuid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:25:48 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) setresgid(r2, r7, r8) pselect6(0x40, &(0x7f0000000640)={0x80000001, 0x1, 0x6, 0x5269, 0x6, 0x6, 0x9, 0x173f000000000000}, &(0x7f0000000680)={0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0x7, 0x4, 0x81, 0xfffffffffffff000}, &(0x7f00000006c0)={0x33f, 0x4, 0xc2, 0x9, 0x9fb2, 0x670, 0x4, 0x2}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0x1]}, 0x8}) getuid() openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:26:08 executing program 7: r0 = socket(0x3, 0x4, 0xd398) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x40055) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x6) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0xe02, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}}, 0x2000000) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x1, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@cache_fscache}, {@cache_mmap}, {@uname={'uname', 0x3d, '\x16)@+#/^'}}, {@cache_mmap}, {@posixacl}, {@loose}], [{@permit_directio}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r4}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x40000, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@euid_eq={'euid', 0x3d, r4}}]}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4094) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x22a900, 0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000, 0x0) mount_setattr(r8, &(0x7f0000000880)='./file0\x00', 0x800, &(0x7f0000000900)={0x10000a, 0xfe, 0x0, {r9}}, 0x20) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x30, r8, 0x101) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4044090) 18:26:08 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2090020, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}, {@msize}, {@cache_loose}], [{@subj_role}]}}) r2 = accept(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/80, 0x50, 0x0, &(0x7f0000000300)=""/104, 0x68}, &(0x7f00000003c0)=0x40) ioctl$TCSBRK(r0, 0x5409, 0x5) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000400)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_vlan\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ah\x00'}, &(0x7f00000004c0)=0x1e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000500)={0x8, 0x5b85, 0x5c6, 0xe12, 0xe, "3ed8773e8841e819"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000540)={0xf31, 0x8, 0x5, 0x2, 0x18, "e2075c094dd4015a"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x7fff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000005c0)={0x9, 0x2, 0x3}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x80020, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@fscache}], [{@obj_user={'obj_user', 0x3d, '^&.'}}]}}) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x2010, r0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x3028b8f51fb1a0df, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r5, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000740)=0x1) 18:26:08 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x1c040) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x3f, 0x21, 0xc0}, {0x8, 0x5a, 0x20, 0x3}, {0x7, 0x2, 0x4, 0x81}]}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xe993) r2 = pidfd_getfd(r0, r0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x14) r4 = socket(0x1a, 0x1, 0x7) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r4) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r4) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c041}, 0x4000000) r7 = gettid() setpgid(r7, 0x0) r8 = pidfd_getfd(r6, r1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r8) 18:26:08 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) setresgid(r2, r7, r8) pselect6(0x40, &(0x7f0000000640)={0x80000001, 0x1, 0x6, 0x5269, 0x6, 0x6, 0x9, 0x173f000000000000}, &(0x7f0000000680)={0x2, 0x0, 0xfffffffffffffffc, 0x8000, 0x7, 0x4, 0x81, 0xfffffffffffff000}, &(0x7f00000006c0)={0x33f, 0x4, 0xc2, 0x9, 0x9fb2, 0x670, 0x4, 0x2}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0x1]}, 0x8}) openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:26:08 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x126, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x800) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x402200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000006c0)={0x401, 0x0, 0x6, 0x7, 0x1000}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000800)={0x6, 0x65, 0x4}) r8 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080) 18:26:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x87}]}, 0x64}}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x1c0d05b71b5ff9d3) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x20000840) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x80c1) socketpair(0x0, 0x800, 0x9, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r6) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x8010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000015}, 0x40000) 18:26:08 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="551fb808cd6bf8f124ea26c742c49986d132d5abb15a774761de358266ac1672d20490e08c33933a559e016d7b8254822a6a8eca65a373632526094c60cb91ca9cab436fa026cb54a0e13f283815cf6e49c19cfcf6d812790609af61018b9ac5ce1b82cb016e7eca750a824545f6d9ae1137514b63df0e727a9a75f160fc4355882043be8d35c752e4fe55e28715d39f961d3d82b5a4a9fac95333ec1328e7049665f43affd7566ed2250075cec72b483fdec4397f7552aa6c5cff69e7aea1323e938a1a004f6a41fb34f43cc5ca24297a2477333d77028ed3fb55935e6841954100b5390c0ce8f436be42f411c8b93b27392301c64480280f91c30b538977b3ab9e6189eef25bf18bed14f0fc2bebc3f25defa9c804a4fb0dcc6717086429a97543c39d3bb966e842c7f4146a427cbecd1a213574714dd4cbd566420bb92270917f1ed245bed24bcf7cbb41ebffb448b067445e9059ec254bcbecdf3b0330df759f0c54a483253fa42b34ec4ae9eb7260439c24e81fe2aff14f07338df19b0a0a6043f55844b909c92ae96f03bb63531b58aaf388bd67e3efb60d5f717c1c1a0ac2ce797d06d7e8ee28100b50f3757348ed5445733fd2f0de35e58933a14d48d8b2492cec2e4d8c98885ca18e681c49a02d78bf473ac817587e84657d8f0cd312902caee41ddf78dccf5e98fddf118ea237664fa47adc29757a6cebc55f265f0c3fa017df9e0599c44064e314f5254a8b1d218436c09316b29500929ff78e410f17a1e00c212109691a2934968db3850b4a0bcea2d5ba9efce695235ce1afaa8729a07950889f646dbde9d0a0e71433b9eb90c906acff54ff24b31b157d5c0968687012c9894a110f72922fa4d48a01114b4bbeaf1cca871ddaad9a99605cbe77f02428587b59384ef3bd82b6e273c574982aa999cca7de30d376493b948500ff5fc74b1a531208c42ede457441eb66dca7bec4519080def19e8a1296ebb9438fcab856b3f20a47fb607b2a7f0d4f5f7f29fead0bfba0c8270e79bd9dd1bda46ae3ec06f50f8dad16ae610b7b502ea2f05012e1528e18a9cb0fbc72c0e5e4a7f397716627fbe9af4e76ef3bb3f1a8653dd1781f8d314871f6c4aa4b92b62764de153821d3a0028f4aa6d2c55dc3200865864bdf580eb0f504beae889cd823f585c08318da8acaf15d3edaa6eb161cd7e3aa2a67bed0b0aef631c83d5a189abfd11a747fbb619e8b421314b04701404e67571239166e8557dd77899b94cd7eff45d4e8867715050c4e12ef18dc161f2ad89926999aa54f240eb436c83cd8520545936b70676b17765aec156249f0dc356843bd58a406795ed3b10e1949a5206006e9fb634777d02409258bd4fc825e1a872cefa07596a2fc960294091c1b185ac0c31e56f1c5046af3117e7d780125d9fd15d774c35df27d63230dd288976b39"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="4ddbbee1f9526538b3aeffc79157d47f5c9cb85a0dce0c4f5469963399913530fd37868cc56357ab68ae66c52cec102892b7b3406bca2aa0051175291684c20905c36a75ef5a14dc327f6225ddf39fab3f4f78502042a6b4a7d5424f6608381e5a3877ee7207ab202947538a4951a38b5c32b301f3e4364bf98bc1a65379127721390abde1f885d6af500c0cf0d65c721c66c0179b0e072bdfa5fa449ed85587e2ef1789d166e1b3eed3a732ac51a7aa8012feedfeb7c025355940d50bac54471bcecef0ef53854aeb8fe08df3eb6cb82399a3353d6a5aba11fe022438c561f1c8d665b7ac4269811473fe47e023841a20680969a55befb1f8207ae9f74d9e90d7b040e7275f5e7f312c60b9aa1635095feda4e6ef7310030a71536aab7d5dca8eea49ce096eda87a0830c8783ac7388bf15e0529c82d617914c56595d9d5237247b6702b65a05dd92ae77b3fa8fa3503b4e3460399aa6a7935ae3413b1615724c41dec2f6f3080377c8dea7d6b2e7902c0b2d7cad208f48f94c3cd94bcd697d1626231040cd8a21611662a5517ee1d047d1e800eeaa35dfee4a10dd26655518d4baf1022bb0bf4f2c20f4619cb1116cf56847f5005a0275816dd2ec0695d71fbf851e4d00edcf9c3b5483196e3246efed6bf3dca5261cc1223d9526215e5bd4233b0ffe2153cca4aaee346a68f51e06f741343868bb5cb22734d40430db87cc91f08c128f3130eb34563b0115e7ee142679acd7e9bb687a9a4987207dc96d27ce645897f76ef08804304a507f82f220278167adf21641631f0bbc71474c3d5bb2361cb22eb78f3c4deb79eba23a83f83010424b36b57ee2decc2e903bf8f4f12bf9302eb29fd25a55922175981095720f049cec9103425c6d0efb78390ce2e4c8b398f3df04ccf8f65f1269c55bf6fc35ca668fda6b6e9033d63f79291488e694b146d85b0387685f5170eed1c61095674c0b1245d16466246e705b6ad4cf6ca46d56b9fcac7b2bbdd4f71c3ea9203352738711313639c828fcfbd79281a96728f728d5d42afccc122e4985fc7ed0783be352ab0d297fac4aa533d242bd7c00f50fca059f496e4b85ce668156d88607de90de8bca4f566544742c46ae6a2f0ae2f5699c2b6f05540a7bd77a0bea8190c0729a96015228028606548215e073bbf78c3813ef5b9855d71d539d95cb675ec3bb9fc20d1d69885dc7d4713940cb5aa971f86aab9535af0f3e86d9a6700254dfcfdf20a2c3a2ddcba8fccdf3f5da245d59d3a55b6c8ae3e079957f24ac94a1faa8053475b51c5e444db9700718931a789ccc1ce9e048003eab8a3a09cd64c335c811807201aa1ac34393ab04e7395dd6460f01054dd5db2f0316470d5265fc77d2e904da8cf47478faae42eaa727365a7584c8dfbb589adf8ba24d567351f03911f8167f0a0aeb16220c70ea5296a4"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_pts(r2, 0x480) r4 = accept(0xffffffffffffffff, &(0x7f0000000b80)=@ax25={{0x3, @netrom}, [@default, @netrom, @remote, @default, @default, @remote, @rose, @null]}, &(0x7f0000000c00)=0x80) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000c40)=0x80000000, 0x4) r5 = socket(0x15, 0x5, 0x8a3) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@local, @in6=@local}}, {{}, 0x0, @in6}}, &(0x7f0000000d80)=0xe8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000e00)) 18:26:08 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xe0, 0x5e, 0x6, @remote, @local, 0x1, 0x1, 0x80000001, 0x83}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x7f, 0x2, 0x20, 0x20, 0x2, r1}, {0x2, 0x5, 0x6, 0x9, 0x1, 0x2, 0x5, 0x1}, {0x8, 0x3, 0x7ff, 0xfffffffffffffffa}, 0x7, 0x6e6bb2, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x3504, 0x3, 0x2, 0x1, 0x401, 0x8a, 0x89d}}, 0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000340)={0x33, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x20, [0xfffffffffffffff8, 0x9, 0x6]}}]}, 0x30) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x4, 0x7, 0xfffffffb, 0x4d, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x20, 0x1, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @loopback, 0x0, 0xf750, 0x4, 0x500, 0xffffffffffffff0e, 0x8600002, r2}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', r3, 0x2f, 0xf9, 0x6, 0x40, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x10, 0x0, 0x2}}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000006c0)) r5 = accept(r0, 0x0, &(0x7f0000000700)) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000740)={0x1, 0x1, 0x9, 0x9, 0x4}, 0xc) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000780)=0x3) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000007c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x6, 0x1b04cf0a, 0x0, 0x5, 0x4}, 0x5) r7 = accept4$inet6(r5, &(0x7f0000000800)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000840)=0x1c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000880)={{{@in, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r5) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0x9}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}}, 0x4001) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000b00)={@loopback, @empty, @empty, 0x2, 0x4, 0x1, 0x500, 0x9, 0x80000002, r4}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x311) 18:26:08 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2090020, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}, {@msize}, {@cache_loose}], [{@subj_role}]}}) r2 = accept(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/80, 0x50, 0x0, &(0x7f0000000300)=""/104, 0x68}, &(0x7f00000003c0)=0x40) ioctl$TCSBRK(r0, 0x5409, 0x5) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000400)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_vlan\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ah\x00'}, &(0x7f00000004c0)=0x1e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000500)={0x8, 0x5b85, 0x5c6, 0xe12, 0xe, "3ed8773e8841e819"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000540)={0xf31, 0x8, 0x5, 0x2, 0x18, "e2075c094dd4015a"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x7fff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000005c0)={0x9, 0x2, 0x3}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x80020, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@fscache}], [{@obj_user={'obj_user', 0x3d, '^&.'}}]}}) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x2010, r0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x3028b8f51fb1a0df, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r5, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000740)=0x1) 18:26:08 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="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"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="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"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_pts(r2, 0x480) r4 = accept(0xffffffffffffffff, &(0x7f0000000b80)=@ax25={{0x3, @netrom}, [@default, @netrom, @remote, @default, @default, @remote, @rose, @null]}, &(0x7f0000000c00)=0x80) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000c40)=0x80000000, 0x4) r5 = socket(0x15, 0x5, 0x8a3) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@local, @in6=@local}}, {{}, 0x0, @in6}}, &(0x7f0000000d80)=0xe8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000e00)) 18:26:08 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) setresgid(r2, r7, r8) openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:26:08 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x126, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x800) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x402200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000006c0)={0x401, 0x0, 0x6, 0x7, 0x1000}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000800)={0x6, 0x65, 0x4}) r8 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080) 18:26:08 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xe0, 0x5e, 0x6, @remote, @local, 0x1, 0x1, 0x80000001, 0x83}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x7f, 0x2, 0x20, 0x20, 0x2, r1}, {0x2, 0x5, 0x6, 0x9, 0x1, 0x2, 0x5, 0x1}, {0x8, 0x3, 0x7ff, 0xfffffffffffffffa}, 0x7, 0x6e6bb2, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x3504, 0x3, 0x2, 0x1, 0x401, 0x8a, 0x89d}}, 0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000340)={0x33, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x20, [0xfffffffffffffff8, 0x9, 0x6]}}]}, 0x30) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x4, 0x7, 0xfffffffb, 0x4d, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x20, 0x1, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @loopback, 0x0, 0xf750, 0x4, 0x500, 0xffffffffffffff0e, 0x8600002, r2}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', r3, 0x2f, 0xf9, 0x6, 0x40, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x10, 0x0, 0x2}}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000006c0)) r5 = accept(r0, 0x0, &(0x7f0000000700)) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000740)={0x1, 0x1, 0x9, 0x9, 0x4}, 0xc) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000780)=0x3) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000007c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x6, 0x1b04cf0a, 0x0, 0x5, 0x4}, 0x5) r7 = accept4$inet6(r5, &(0x7f0000000800)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000840)=0x1c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000880)={{{@in, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r5) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0x9}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}}, 0x4001) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000b00)={@loopback, @empty, @empty, 0x2, 0x4, 0x1, 0x500, 0x9, 0x80000002, r4}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x311) 18:26:08 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2090020, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}, {@msize}, {@cache_loose}], [{@subj_role}]}}) r2 = accept(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/80, 0x50, 0x0, &(0x7f0000000300)=""/104, 0x68}, &(0x7f00000003c0)=0x40) ioctl$TCSBRK(r0, 0x5409, 0x5) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000400)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_vlan\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ah\x00'}, &(0x7f00000004c0)=0x1e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000500)={0x8, 0x5b85, 0x5c6, 0xe12, 0xe, "3ed8773e8841e819"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000540)={0xf31, 0x8, 0x5, 0x2, 0x18, "e2075c094dd4015a"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x7fff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000005c0)={0x9, 0x2, 0x3}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x80020, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@fscache}], [{@obj_user={'obj_user', 0x3d, '^&.'}}]}}) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x2010, r0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x3028b8f51fb1a0df, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r5, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000740)=0x1) 18:26:22 executing program 7: r0 = socket(0x3, 0x4, 0xd398) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x40055) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x6) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0xe02, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}}, 0x2000000) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x1, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@cache_fscache}, {@cache_mmap}, {@uname={'uname', 0x3d, '\x16)@+#/^'}}, {@cache_mmap}, {@posixacl}, {@loose}], [{@permit_directio}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r4}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x40000, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@euid_eq={'euid', 0x3d, r4}}]}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4094) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x22a900, 0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000, 0x0) mount_setattr(r8, &(0x7f0000000880)='./file0\x00', 0x800, &(0x7f0000000900)={0x10000a, 0xfe, 0x0, {r9}}, 0x20) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x30, r8, 0x101) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4044090) 18:26:22 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x126, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x800) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x402200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000006c0)={0x401, 0x0, 0x6, 0x7, 0x1000}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000800)={0x6, 0x65, 0x4}) r8 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080) 18:26:22 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x1c040) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x3f, 0x21, 0xc0}, {0x8, 0x5a, 0x20, 0x3}, {0x7, 0x2, 0x4, 0x81}]}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xe993) r2 = pidfd_getfd(r0, r0, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x14) r4 = socket(0x1a, 0x1, 0x7) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r4) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r4) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c041}, 0x4000000) r7 = gettid() setpgid(r7, 0x0) r8 = pidfd_getfd(r6, r1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000580), r8) 18:26:22 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xe0, 0x5e, 0x6, @remote, @local, 0x1, 0x1, 0x80000001, 0x83}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x7f, 0x2, 0x20, 0x20, 0x2, r1}, {0x2, 0x5, 0x6, 0x9, 0x1, 0x2, 0x5, 0x1}, {0x8, 0x3, 0x7ff, 0xfffffffffffffffa}, 0x7, 0x6e6bb2, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x3504, 0x3, 0x2, 0x1, 0x401, 0x8a, 0x89d}}, 0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000340)={0x33, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x20, [0xfffffffffffffff8, 0x9, 0x6]}}]}, 0x30) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x4, 0x7, 0xfffffffb, 0x4d, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x20, 0x1, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @loopback, 0x0, 0xf750, 0x4, 0x500, 0xffffffffffffff0e, 0x8600002, r2}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', r3, 0x2f, 0xf9, 0x6, 0x40, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x10, 0x0, 0x2}}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000006c0)) r5 = accept(r0, 0x0, &(0x7f0000000700)) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000740)={0x1, 0x1, 0x9, 0x9, 0x4}, 0xc) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000780)=0x3) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000007c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x6, 0x1b04cf0a, 0x0, 0x5, 0x4}, 0x5) r7 = accept4$inet6(r5, &(0x7f0000000800)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000840)=0x1c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000880)={{{@in, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r5) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0x9}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}}, 0x4001) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000b00)={@loopback, @empty, @empty, 0x2, 0x4, 0x1, 0x500, 0x9, 0x80000002, r4}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x311) 18:26:22 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) setresgid(r2, r7, r8) openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:26:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x87}]}, 0x64}}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x1c0d05b71b5ff9d3) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x20000840) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x80c1) socketpair(0x0, 0x800, 0x9, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r6) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x8010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000015}, 0x40000) 18:26:22 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="551fb808cd6bf8f124ea26c742c49986d132d5abb15a774761de358266ac1672d20490e08c33933a559e016d7b8254822a6a8eca65a373632526094c60cb91ca9cab436fa026cb54a0e13f283815cf6e49c19cfcf6d812790609af61018b9ac5ce1b82cb016e7eca750a824545f6d9ae1137514b63df0e727a9a75f160fc4355882043be8d35c752e4fe55e28715d39f961d3d82b5a4a9fac95333ec1328e7049665f43affd7566ed2250075cec72b483fdec4397f7552aa6c5cff69e7aea1323e938a1a004f6a41fb34f43cc5ca24297a2477333d77028ed3fb55935e6841954100b5390c0ce8f436be42f411c8b93b27392301c64480280f91c30b538977b3ab9e6189eef25bf18bed14f0fc2bebc3f25defa9c804a4fb0dcc6717086429a97543c39d3bb966e842c7f4146a427cbecd1a213574714dd4cbd566420bb92270917f1ed245bed24bcf7cbb41ebffb448b067445e9059ec254bcbecdf3b0330df759f0c54a483253fa42b34ec4ae9eb7260439c24e81fe2aff14f07338df19b0a0a6043f55844b909c92ae96f03bb63531b58aaf388bd67e3efb60d5f717c1c1a0ac2ce797d06d7e8ee28100b50f3757348ed5445733fd2f0de35e58933a14d48d8b2492cec2e4d8c98885ca18e681c49a02d78bf473ac817587e84657d8f0cd312902caee41ddf78dccf5e98fddf118ea237664fa47adc29757a6cebc55f265f0c3fa017df9e0599c44064e314f5254a8b1d218436c09316b29500929ff78e410f17a1e00c212109691a2934968db3850b4a0bcea2d5ba9efce695235ce1afaa8729a07950889f646dbde9d0a0e71433b9eb90c906acff54ff24b31b157d5c0968687012c9894a110f72922fa4d48a01114b4bbeaf1cca871ddaad9a99605cbe77f02428587b59384ef3bd82b6e273c574982aa999cca7de30d376493b948500ff5fc74b1a531208c42ede457441eb66dca7bec4519080def19e8a1296ebb9438fcab856b3f20a47fb607b2a7f0d4f5f7f29fead0bfba0c8270e79bd9dd1bda46ae3ec06f50f8dad16ae610b7b502ea2f05012e1528e18a9cb0fbc72c0e5e4a7f397716627fbe9af4e76ef3bb3f1a8653dd1781f8d314871f6c4aa4b92b62764de153821d3a0028f4aa6d2c55dc3200865864bdf580eb0f504beae889cd823f585c08318da8acaf15d3edaa6eb161cd7e3aa2a67bed0b0aef631c83d5a189abfd11a747fbb619e8b421314b04701404e67571239166e8557dd77899b94cd7eff45d4e8867715050c4e12ef18dc161f2ad89926999aa54f240eb436c83cd8520545936b70676b17765aec156249f0dc356843bd58a406795ed3b10e1949a5206006e9fb634777d02409258bd4fc825e1a872cefa07596a2fc960294091c1b185ac0c31e56f1c5046af3117e7d780125d9fd15d774c35df27d63230dd288976b39"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="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"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_pts(r2, 0x480) r4 = accept(0xffffffffffffffff, &(0x7f0000000b80)=@ax25={{0x3, @netrom}, [@default, @netrom, @remote, @default, @default, @remote, @rose, @null]}, &(0x7f0000000c00)=0x80) setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000c40)=0x80000000, 0x4) r5 = socket(0x15, 0x5, 0x8a3) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@local, @in6=@local}}, {{}, 0x0, @in6}}, &(0x7f0000000d80)=0xe8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000e00)) 18:26:22 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2090020, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}, {@msize}, {@cache_loose}], [{@subj_role}]}}) r2 = accept(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/80, 0x50, 0x0, &(0x7f0000000300)=""/104, 0x68}, &(0x7f00000003c0)=0x40) ioctl$TCSBRK(r0, 0x5409, 0x5) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000400)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_vlan\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ah\x00'}, &(0x7f00000004c0)=0x1e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000500)={0x8, 0x5b85, 0x5c6, 0xe12, 0xe, "3ed8773e8841e819"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000540)={0xf31, 0x8, 0x5, 0x2, 0x18, "e2075c094dd4015a"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x7fff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000005c0)={0x9, 0x2, 0x3}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x80020, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@fscache}], [{@obj_user={'obj_user', 0x3d, '^&.'}}]}}) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x2010, r0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x3028b8f51fb1a0df, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x50, r5, 0x0) 18:26:22 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:26:22 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2090020, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}, {@msize}, {@cache_loose}], [{@subj_role}]}}) r2 = accept(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/80, 0x50, 0x0, &(0x7f0000000300)=""/104, 0x68}, &(0x7f00000003c0)=0x40) ioctl$TCSBRK(r0, 0x5409, 0x5) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000400)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_vlan\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ah\x00'}, &(0x7f00000004c0)=0x1e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000500)={0x8, 0x5b85, 0x5c6, 0xe12, 0xe, "3ed8773e8841e819"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000540)={0xf31, 0x8, 0x5, 0x2, 0x18, "e2075c094dd4015a"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x7fff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000005c0)={0x9, 0x2, 0x3}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x80020, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@fscache}], [{@obj_user={'obj_user', 0x3d, '^&.'}}]}}) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000005, 0x2010, r0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x3028b8f51fb1a0df, 0x0) 18:26:36 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:26:36 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x126, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x800) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x402200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000006c0)={0x401, 0x0, 0x6, 0x7, 0x1000}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000800)={0x6, 0x65, 0x4}) r8 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080) 18:26:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x87}]}, 0x64}}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x1c0d05b71b5ff9d3) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x20000840) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x80c1) socketpair(0x0, 0x800, 0x9, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r6) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x8010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000015}, 0x40000) 18:26:36 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x1c040) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x3f, 0x21, 0xc0}, {0x8, 0x5a, 0x20, 0x3}, {0x7, 0x2, 0x4, 0x81}]}) ioctl$TIOCGPTPEER(r0, 0x5441, 0xe993) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x14) r3 = socket(0x1a, 0x1, 0x7) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r3) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r3) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c041}, 0x4000000) r6 = gettid() setpgid(r6, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000580), 0xffffffffffffffff) 18:26:36 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2090020, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}, {@msize}, {@cache_loose}], [{@subj_role}]}}) r2 = accept(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/80, 0x50, 0x0, &(0x7f0000000300)=""/104, 0x68}, &(0x7f00000003c0)=0x40) ioctl$TCSBRK(r0, 0x5409, 0x5) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000400)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_vlan\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ah\x00'}, &(0x7f00000004c0)=0x1e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000500)={0x8, 0x5b85, 0x5c6, 0xe12, 0xe, "3ed8773e8841e819"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000540)={0xf31, 0x8, 0x5, 0x2, 0x18, "e2075c094dd4015a"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x7fff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000005c0)={0x9, 0x2, 0x3}) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x80020, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag}, {@aname={'aname', 0x3d, 'cache=loose'}}, {@fscache}], [{@obj_user={'obj_user', 0x3d, '^&.'}}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x3028b8f51fb1a0df, 0x0) 18:26:36 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xe0, 0x5e, 0x6, @remote, @local, 0x1, 0x1, 0x80000001, 0x83}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x7f, 0x2, 0x20, 0x20, 0x2, r1}, {0x2, 0x5, 0x6, 0x9, 0x1, 0x2, 0x5, 0x1}, {0x8, 0x3, 0x7ff, 0xfffffffffffffffa}, 0x7, 0x6e6bb2, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x3504, 0x3, 0x2, 0x1, 0x401, 0x8a, 0x89d}}, 0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000340)={0x33, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x20, [0xfffffffffffffff8, 0x9, 0x6]}}]}, 0x30) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x4, 0x7, 0xfffffffb, 0x4d, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x20, 0x1, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @loopback, 0x0, 0xf750, 0x4, 0x500, 0xffffffffffffff0e, 0x8600002, r2}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', r3, 0x2f, 0xf9, 0x6, 0x40, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x10, 0x0, 0x2}}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000006c0)) r5 = accept(r0, 0x0, &(0x7f0000000700)) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000740)={0x1, 0x1, 0x9, 0x9, 0x4}, 0xc) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000780)=0x3) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f00000007c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x6, 0x1b04cf0a, 0x0, 0x5, 0x4}, 0x5) r7 = accept4$inet6(r5, &(0x7f0000000800)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000840)=0x1c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000880)={{{@in, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r5) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0x9}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}}, 0x4001) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000b00)={@loopback, @empty, @empty, 0x2, 0x4, 0x1, 0x500, 0x9, 0x80000002, r4}) 18:26:36 executing program 7: r0 = socket(0x3, 0x4, 0xd398) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x40055) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x6) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0xe02, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}}, 0x2000000) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x1, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@cache_fscache}, {@cache_mmap}, {@uname={'uname', 0x3d, '\x16)@+#/^'}}, {@cache_mmap}, {@posixacl}, {@loose}], [{@permit_directio}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r4}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x40000, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@euid_eq={'euid', 0x3d, r4}}]}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4094) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x22a900, 0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000, 0x0) mount_setattr(r8, &(0x7f0000000880)='./file0\x00', 0x800, &(0x7f0000000900)={0x10000a, 0xfe, 0x0, {r9}}, 0x20) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x30, r8, 0x101) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4044090) 18:26:36 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="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"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="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"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x480) r3 = accept(0xffffffffffffffff, &(0x7f0000000b80)=@ax25={{0x3, @netrom}, [@default, @netrom, @remote, @default, @default, @remote, @rose, @null]}, &(0x7f0000000c00)=0x80) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000c40)=0x80000000, 0x4) r4 = socket(0x15, 0x5, 0x8a3) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@local, @in6=@local}}, {{}, 0x0, @in6}}, &(0x7f0000000d80)=0xe8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) 18:26:36 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2090020, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}, {@msize}, {@cache_loose}], [{@subj_role}]}}) r2 = accept(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/80, 0x50, 0x0, &(0x7f0000000300)=""/104, 0x68}, &(0x7f00000003c0)=0x40) ioctl$TCSBRK(r0, 0x5409, 0x5) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000400)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_vlan\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ah\x00'}, &(0x7f00000004c0)=0x1e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000500)={0x8, 0x5b85, 0x5c6, 0xe12, 0xe, "3ed8773e8841e819"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000540)={0xf31, 0x8, 0x5, 0x2, 0x18, "e2075c094dd4015a"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x7fff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000005c0)={0x9, 0x2, 0x3}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x3028b8f51fb1a0df, 0x0) 18:26:36 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r5) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:26:36 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x126, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x800) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x402200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000006c0)={0x401, 0x0, 0x6, 0x7, 0x1000}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000800)={0x6, 0x65, 0x4}) r8 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080) 18:26:36 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="551fb808cd6bf8f124ea26c742c49986d132d5abb15a774761de358266ac1672d20490e08c33933a559e016d7b8254822a6a8eca65a373632526094c60cb91ca9cab436fa026cb54a0e13f283815cf6e49c19cfcf6d812790609af61018b9ac5ce1b82cb016e7eca750a824545f6d9ae1137514b63df0e727a9a75f160fc4355882043be8d35c752e4fe55e28715d39f961d3d82b5a4a9fac95333ec1328e7049665f43affd7566ed2250075cec72b483fdec4397f7552aa6c5cff69e7aea1323e938a1a004f6a41fb34f43cc5ca24297a2477333d77028ed3fb55935e6841954100b5390c0ce8f436be42f411c8b93b27392301c64480280f91c30b538977b3ab9e6189eef25bf18bed14f0fc2bebc3f25defa9c804a4fb0dcc6717086429a97543c39d3bb966e842c7f4146a427cbecd1a213574714dd4cbd566420bb92270917f1ed245bed24bcf7cbb41ebffb448b067445e9059ec254bcbecdf3b0330df759f0c54a483253fa42b34ec4ae9eb7260439c24e81fe2aff14f07338df19b0a0a6043f55844b909c92ae96f03bb63531b58aaf388bd67e3efb60d5f717c1c1a0ac2ce797d06d7e8ee28100b50f3757348ed5445733fd2f0de35e58933a14d48d8b2492cec2e4d8c98885ca18e681c49a02d78bf473ac817587e84657d8f0cd312902caee41ddf78dccf5e98fddf118ea237664fa47adc29757a6cebc55f265f0c3fa017df9e0599c44064e314f5254a8b1d218436c09316b29500929ff78e410f17a1e00c212109691a2934968db3850b4a0bcea2d5ba9efce695235ce1afaa8729a07950889f646dbde9d0a0e71433b9eb90c906acff54ff24b31b157d5c0968687012c9894a110f72922fa4d48a01114b4bbeaf1cca871ddaad9a99605cbe77f02428587b59384ef3bd82b6e273c574982aa999cca7de30d376493b948500ff5fc74b1a531208c42ede457441eb66dca7bec4519080def19e8a1296ebb9438fcab856b3f20a47fb607b2a7f0d4f5f7f29fead0bfba0c8270e79bd9dd1bda46ae3ec06f50f8dad16ae610b7b502ea2f05012e1528e18a9cb0fbc72c0e5e4a7f397716627fbe9af4e76ef3bb3f1a8653dd1781f8d314871f6c4aa4b92b62764de153821d3a0028f4aa6d2c55dc3200865864bdf580eb0f504beae889cd823f585c08318da8acaf15d3edaa6eb161cd7e3aa2a67bed0b0aef631c83d5a189abfd11a747fbb619e8b421314b04701404e67571239166e8557dd77899b94cd7eff45d4e8867715050c4e12ef18dc161f2ad89926999aa54f240eb436c83cd8520545936b70676b17765aec156249f0dc356843bd58a406795ed3b10e1949a5206006e9fb634777d02409258bd4fc825e1a872cefa07596a2fc960294091c1b185ac0c31e56f1c5046af3117e7d780125d9fd15d774c35df27d63230dd288976b39"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="4ddbbee1f9526538b3aeffc79157d47f5c9cb85a0dce0c4f5469963399913530fd37868cc56357ab68ae66c52cec102892b7b3406bca2aa0051175291684c20905c36a75ef5a14dc327f6225ddf39fab3f4f78502042a6b4a7d5424f6608381e5a3877ee7207ab202947538a4951a38b5c32b301f3e4364bf98bc1a65379127721390abde1f885d6af500c0cf0d65c721c66c0179b0e072bdfa5fa449ed85587e2ef1789d166e1b3eed3a732ac51a7aa8012feedfeb7c025355940d50bac54471bcecef0ef53854aeb8fe08df3eb6cb82399a3353d6a5aba11fe022438c561f1c8d665b7ac4269811473fe47e023841a20680969a55befb1f8207ae9f74d9e90d7b040e7275f5e7f312c60b9aa1635095feda4e6ef7310030a71536aab7d5dca8eea49ce096eda87a0830c8783ac7388bf15e0529c82d617914c56595d9d5237247b6702b65a05dd92ae77b3fa8fa3503b4e3460399aa6a7935ae3413b1615724c41dec2f6f3080377c8dea7d6b2e7902c0b2d7cad208f48f94c3cd94bcd697d1626231040cd8a21611662a5517ee1d047d1e800eeaa35dfee4a10dd26655518d4baf1022bb0bf4f2c20f4619cb1116cf56847f5005a0275816dd2ec0695d71fbf851e4d00edcf9c3b5483196e3246efed6bf3dca5261cc1223d9526215e5bd4233b0ffe2153cca4aaee346a68f51e06f741343868bb5cb22734d40430db87cc91f08c128f3130eb34563b0115e7ee142679acd7e9bb687a9a4987207dc96d27ce645897f76ef08804304a507f82f220278167adf21641631f0bbc71474c3d5bb2361cb22eb78f3c4deb79eba23a83f83010424b36b57ee2decc2e903bf8f4f12bf9302eb29fd25a55922175981095720f049cec9103425c6d0efb78390ce2e4c8b398f3df04ccf8f65f1269c55bf6fc35ca668fda6b6e9033d63f79291488e694b146d85b0387685f5170eed1c61095674c0b1245d16466246e705b6ad4cf6ca46d56b9fcac7b2bbdd4f71c3ea9203352738711313639c828fcfbd79281a96728f728d5d42afccc122e4985fc7ed0783be352ab0d297fac4aa533d242bd7c00f50fca059f496e4b85ce668156d88607de90de8bca4f566544742c46ae6a2f0ae2f5699c2b6f05540a7bd77a0bea8190c0729a96015228028606548215e073bbf78c3813ef5b9855d71d539d95cb675ec3bb9fc20d1d69885dc7d4713940cb5aa971f86aab9535af0f3e86d9a6700254dfcfdf20a2c3a2ddcba8fccdf3f5da245d59d3a55b6c8ae3e079957f24ac94a1faa8053475b51c5e444db9700718931a789ccc1ce9e048003eab8a3a09cd64c335c811807201aa1ac34393ab04e7395dd6460f01054dd5db2f0316470d5265fc77d2e904da8cf47478faae42eaa727365a7584c8dfbb589adf8ba24d567351f03911f8167f0a0aeb16220c70ea5296a4"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x480) r3 = accept(0xffffffffffffffff, &(0x7f0000000b80)=@ax25={{0x3, @netrom}, [@default, @netrom, @remote, @default, @default, @remote, @rose, @null]}, &(0x7f0000000c00)=0x80) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000c40)=0x80000000, 0x4) socket(0x15, 0x5, 0x8a3) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) 18:26:50 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="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"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="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"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x480) r3 = accept(0xffffffffffffffff, &(0x7f0000000b80)=@ax25={{0x3, @netrom}, [@default, @netrom, @remote, @default, @default, @remote, @rose, @null]}, &(0x7f0000000c00)=0x80) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000c40)=0x80000000, 0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) 18:26:50 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2090020, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}, {@msize}, {@cache_loose}], [{@subj_role}]}}) r2 = accept(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/80, 0x50, 0x0, &(0x7f0000000300)=""/104, 0x68}, &(0x7f00000003c0)=0x40) ioctl$TCSBRK(r0, 0x5409, 0x5) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000400)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_vlan\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ah\x00'}, &(0x7f00000004c0)=0x1e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000500)={0x8, 0x5b85, 0x5c6, 0xe12, 0xe, "3ed8773e8841e819"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000540)={0xf31, 0x8, 0x5, 0x2, 0x18, "e2075c094dd4015a"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x7fff) syz_open_dev$tty1(0xc, 0x4, 0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x3028b8f51fb1a0df, 0x0) 18:26:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x87}]}, 0x64}}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x1c0d05b71b5ff9d3) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x20000840) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x80c1) socketpair(0x0, 0x800, 0x9, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r6) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x8010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) 18:26:50 executing program 7: r0 = socket(0x3, 0x4, 0xd398) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x40055) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x6) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0xe02, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}}, 0x2000000) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x1, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@cache_fscache}, {@cache_mmap}, {@uname={'uname', 0x3d, '\x16)@+#/^'}}, {@cache_mmap}, {@posixacl}, {@loose}], [{@permit_directio}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r4}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x40000, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@euid_eq={'euid', 0x3d, r4}}]}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4094) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x22a900, 0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000, 0x0) mount_setattr(r8, &(0x7f0000000880)='./file0\x00', 0x800, &(0x7f0000000900)={0x10000a, 0xfe, 0x0, {r9}}, 0x20) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x30, r8, 0x101) 18:26:50 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r5) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:26:50 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xe0, 0x5e, 0x6, @remote, @local, 0x1, 0x1, 0x80000001, 0x83}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x7f, 0x2, 0x20, 0x20, 0x2, r1}, {0x2, 0x5, 0x6, 0x9, 0x1, 0x2, 0x5, 0x1}, {0x8, 0x3, 0x7ff, 0xfffffffffffffffa}, 0x7, 0x6e6bb2, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x3504, 0x3, 0x2, 0x1, 0x401, 0x8a, 0x89d}}, 0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000340)={0x33, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x20, [0xfffffffffffffff8, 0x9, 0x6]}}]}, 0x30) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x4, 0x7, 0xfffffffb, 0x4d, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x20, 0x1, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @loopback, 0x0, 0xf750, 0x4, 0x500, 0xffffffffffffff0e, 0x8600002, r2}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', r3, 0x2f, 0xf9, 0x6, 0x40, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x10, 0x0, 0x2}}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000006c0)) r4 = accept(r0, 0x0, &(0x7f0000000700)) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000740)={0x1, 0x1, 0x9, 0x9, 0x4}, 0xc) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000780)=0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000007c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x6, 0x1b04cf0a, 0x0, 0x5, 0x4}, 0x5) r6 = accept4$inet6(r4, &(0x7f0000000800)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000840)=0x1c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000880)={{{@in, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r4) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0x9}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}}, 0x4001) 18:26:50 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x126, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x800) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x402200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000006c0)={0x401, 0x0, 0x6, 0x7, 0x1000}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000800)={0x6, 0x65, 0x4}) r8 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080) 18:26:50 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x1c040) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x3f, 0x21, 0xc0}, {0x8, 0x5a, 0x20, 0x3}, {0x7, 0x2, 0x4, 0x81}]}) ioctl$TIOCGPTPEER(r0, 0x5441, 0xe993) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x14) r3 = socket(0x1a, 0x1, 0x7) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r3) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r3) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c041}, 0x4000000) gettid() syz_genetlink_get_family_id$smc(&(0x7f0000000580), 0xffffffffffffffff) 18:26:50 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="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"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="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"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x480) accept(0xffffffffffffffff, &(0x7f0000000b80)=@ax25={{0x3, @netrom}, [@default, @netrom, @remote, @default, @default, @remote, @rose, @null]}, &(0x7f0000000c00)=0x80) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) 18:26:50 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r5) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x1, &(0x7f00000005c0)=[r3]) openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:26:50 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="551fb808cd6bf8f124ea26c742c49986d132d5abb15a774761de358266ac1672d20490e08c33933a559e016d7b8254822a6a8eca65a373632526094c60cb91ca9cab436fa026cb54a0e13f283815cf6e49c19cfcf6d812790609af61018b9ac5ce1b82cb016e7eca750a824545f6d9ae1137514b63df0e727a9a75f160fc4355882043be8d35c752e4fe55e28715d39f961d3d82b5a4a9fac95333ec1328e7049665f43affd7566ed2250075cec72b483fdec4397f7552aa6c5cff69e7aea1323e938a1a004f6a41fb34f43cc5ca24297a2477333d77028ed3fb55935e6841954100b5390c0ce8f436be42f411c8b93b27392301c64480280f91c30b538977b3ab9e6189eef25bf18bed14f0fc2bebc3f25defa9c804a4fb0dcc6717086429a97543c39d3bb966e842c7f4146a427cbecd1a213574714dd4cbd566420bb92270917f1ed245bed24bcf7cbb41ebffb448b067445e9059ec254bcbecdf3b0330df759f0c54a483253fa42b34ec4ae9eb7260439c24e81fe2aff14f07338df19b0a0a6043f55844b909c92ae96f03bb63531b58aaf388bd67e3efb60d5f717c1c1a0ac2ce797d06d7e8ee28100b50f3757348ed5445733fd2f0de35e58933a14d48d8b2492cec2e4d8c98885ca18e681c49a02d78bf473ac817587e84657d8f0cd312902caee41ddf78dccf5e98fddf118ea237664fa47adc29757a6cebc55f265f0c3fa017df9e0599c44064e314f5254a8b1d218436c09316b29500929ff78e410f17a1e00c212109691a2934968db3850b4a0bcea2d5ba9efce695235ce1afaa8729a07950889f646dbde9d0a0e71433b9eb90c906acff54ff24b31b157d5c0968687012c9894a110f72922fa4d48a01114b4bbeaf1cca871ddaad9a99605cbe77f02428587b59384ef3bd82b6e273c574982aa999cca7de30d376493b948500ff5fc74b1a531208c42ede457441eb66dca7bec4519080def19e8a1296ebb9438fcab856b3f20a47fb607b2a7f0d4f5f7f29fead0bfba0c8270e79bd9dd1bda46ae3ec06f50f8dad16ae610b7b502ea2f05012e1528e18a9cb0fbc72c0e5e4a7f397716627fbe9af4e76ef3bb3f1a8653dd1781f8d314871f6c4aa4b92b62764de153821d3a0028f4aa6d2c55dc3200865864bdf580eb0f504beae889cd823f585c08318da8acaf15d3edaa6eb161cd7e3aa2a67bed0b0aef631c83d5a189abfd11a747fbb619e8b421314b04701404e67571239166e8557dd77899b94cd7eff45d4e8867715050c4e12ef18dc161f2ad89926999aa54f240eb436c83cd8520545936b70676b17765aec156249f0dc356843bd58a406795ed3b10e1949a5206006e9fb634777d02409258bd4fc825e1a872cefa07596a2fc960294091c1b185ac0c31e56f1c5046af3117e7d780125d9fd15d774c35df27d63230dd288976b39"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="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"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x480) accept(0xffffffffffffffff, &(0x7f0000000b80)=@ax25={{0x3, @netrom}, [@default, @netrom, @remote, @default, @default, @remote, @rose, @null]}, &(0x7f0000000c00)=0x80) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) 18:26:50 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2090020, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}, {@msize}, {@cache_loose}], [{@subj_role}]}}) r2 = accept(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/80, 0x50, 0x0, &(0x7f0000000300)=""/104, 0x68}, &(0x7f00000003c0)=0x40) ioctl$TCSBRK(r0, 0x5409, 0x5) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000400)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_vlan\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ah\x00'}, &(0x7f00000004c0)=0x1e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000500)={0x8, 0x5b85, 0x5c6, 0xe12, 0xe, "3ed8773e8841e819"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000540)={0xf31, 0x8, 0x5, 0x2, 0x18, "e2075c094dd4015a"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000580)=0x7fff) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x3028b8f51fb1a0df, 0x0) 18:26:50 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) wait4(0xffffffffffffffff, &(0x7f0000000380), 0x1000000, &(0x7f00000003c0)) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:26:50 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x126, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x800) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x402200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000006c0)={0x401, 0x0, 0x6, 0x7, 0x1000}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000000800)={0x6, 0x65, 0x4}) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080) 18:26:50 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="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"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="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"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x480) accept(0xffffffffffffffff, &(0x7f0000000b80)=@ax25={{0x3, @netrom}, [@default, @netrom, @remote, @default, @default, @remote, @rose, @null]}, &(0x7f0000000c00)=0x80) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) [ 183.594587] Bluetooth: hci5: command 0x0406 tx timeout [ 183.594642] Bluetooth: hci4: command 0x0406 tx timeout [ 183.595461] Bluetooth: hci3: command 0x0406 tx timeout [ 183.596188] Bluetooth: hci0: command 0x0406 tx timeout [ 183.597394] Bluetooth: hci7: command 0x0406 tx timeout [ 183.598084] Bluetooth: hci6: command 0x0406 tx timeout [ 183.598824] Bluetooth: hci1: command 0x0406 tx timeout [ 187.690485] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.691712] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.692692] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.694034] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.696267] Call Trace: [ 187.697183] [ 187.697628] __schedule+0x893/0x2470 [ 187.698303] ? io_schedule_timeout+0x150/0x150 [ 187.699130] ? do_raw_spin_lock+0x121/0x260 [ 187.699952] ? rwlock_bug.part.0+0x90/0x90 [ 187.700630] schedule+0xda/0x1b0 [ 187.701127] rescuer_thread+0x851/0xdb0 [ 187.701731] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.702466] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.703171] ? lockdep_hardirqs_on+0x79/0x100 [ 187.703834] ? worker_thread+0x1260/0x1260 [ 187.704485] kthread+0x2ed/0x3a0 [ 187.704980] ? kthread_complete_and_exit+0x40/0x40 [ 187.705701] ret_from_fork+0x22/0x30 [ 187.706263] [ 187.706627] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.707538] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.708292] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.709380] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.710548] Call Trace: [ 187.710916] [ 187.711247] __schedule+0x893/0x2470 [ 187.711815] ? io_schedule_timeout+0x150/0x150 [ 187.712519] ? do_raw_spin_lock+0x121/0x260 [ 187.713144] ? rwlock_bug.part.0+0x90/0x90 [ 187.713775] schedule+0xda/0x1b0 [ 187.714274] rescuer_thread+0x851/0xdb0 [ 187.714874] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.715605] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.716348] ? lockdep_hardirqs_on+0x79/0x100 [ 187.716981] ? worker_thread+0x1260/0x1260 [ 187.717624] kthread+0x2ed/0x3a0 [ 187.718110] ? kthread_complete_and_exit+0x40/0x40 [ 187.718833] ret_from_fork+0x22/0x30 [ 187.719424] [ 187.719758] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.720695] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.721450] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.722512] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.723670] Call Trace: [ 187.724053] [ 187.724415] __schedule+0x893/0x2470 [ 187.724960] ? io_schedule_timeout+0x150/0x150 [ 187.725622] ? do_raw_spin_lock+0x121/0x260 [ 187.726251] ? rwlock_bug.part.0+0x90/0x90 [ 187.726885] schedule+0xda/0x1b0 [ 187.727410] rescuer_thread+0x851/0xdb0 [ 187.727999] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.728724] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.729454] ? lockdep_hardirqs_on+0x79/0x100 [ 187.730094] ? worker_thread+0x1260/0x1260 [ 187.730741] kthread+0x2ed/0x3a0 [ 187.731236] ? kthread_complete_and_exit+0x40/0x40 [ 187.731978] ret_from_fork+0x22/0x30 [ 187.732555] [ 187.732889] INFO: task netns:6 blocked for more than 143 seconds. [ 187.733748] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.734492] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.735551] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.736718] Call Trace: [ 187.737080] [ 187.737433] __schedule+0x893/0x2470 [ 187.737979] ? io_schedule_timeout+0x150/0x150 [ 187.738653] ? do_raw_spin_lock+0x121/0x260 [ 187.739267] ? rwlock_bug.part.0+0x90/0x90 [ 187.739915] schedule+0xda/0x1b0 [ 187.740450] rescuer_thread+0x851/0xdb0 [ 187.741015] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.741730] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.742460] ? lockdep_hardirqs_on+0x79/0x100 [ 187.743099] ? worker_thread+0x1260/0x1260 [ 187.743728] kthread+0x2ed/0x3a0 [ 187.744228] ? kthread_complete_and_exit+0x40/0x40 [ 187.744945] ret_from_fork+0x22/0x30 [ 187.745522] [ 187.745861] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 187.746782] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.747529] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.748611] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 187.749759] Workqueue: 0x0 (ata_sff) [ 187.750304] Call Trace: [ 187.750693] [ 187.751019] __schedule+0x893/0x2470 [ 187.751597] ? io_schedule_timeout+0x150/0x150 [ 187.752246] ? do_raw_spin_lock+0x121/0x260 [ 187.752900] schedule+0xda/0x1b0 [ 187.753427] worker_thread+0x15f/0x1260 [ 187.754015] ? process_one_work+0x16a0/0x16a0 [ 187.754679] kthread+0x2ed/0x3a0 [ 187.755167] ? kthread_complete_and_exit+0x40/0x40 [ 187.755888] ret_from_fork+0x22/0x30 [ 187.756473] [ 187.756805] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.757704] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.758441] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.759486] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 187.760631] Workqueue: 0x0 (events_highpri) [ 187.761230] Call Trace: [ 187.761607] [ 187.761929] __schedule+0x893/0x2470 [ 187.762481] ? io_schedule_timeout+0x150/0x150 [ 187.763116] schedule+0xda/0x1b0 [ 187.763615] worker_thread+0x15f/0x1260 [ 187.764193] ? process_one_work+0x16a0/0x16a0 [ 187.764841] kthread+0x2ed/0x3a0 [ 187.765334] ? kthread_complete_and_exit+0x40/0x40 [ 187.765998] ret_from_fork+0x22/0x30 [ 187.766570] [ 187.766895] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.767791] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.768540] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.769561] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.770669] Call Trace: [ 187.771016] [ 187.771355] __schedule+0x893/0x2470 [ 187.771883] ? io_schedule_timeout+0x150/0x150 [ 187.772529] ? do_raw_spin_lock+0x121/0x260 [ 187.773113] ? rwlock_bug.part.0+0x90/0x90 [ 187.773722] schedule+0xda/0x1b0 [ 187.774192] rescuer_thread+0x851/0xdb0 [ 187.774756] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.775452] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.776145] ? lockdep_hardirqs_on+0x79/0x100 [ 187.776796] ? worker_thread+0x1260/0x1260 [ 187.777430] kthread+0x2ed/0x3a0 [ 187.777914] ? kthread_complete_and_exit+0x40/0x40 [ 187.778650] ret_from_fork+0x22/0x30 [ 187.779203] [ 187.779560] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.780538] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.781258] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.782296] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.783467] Call Trace: [ 187.783824] [ 187.784160] __schedule+0x893/0x2470 [ 187.784732] ? io_schedule_timeout+0x150/0x150 [ 187.785401] ? mark_held_locks+0x9e/0xe0 [ 187.785974] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.786693] schedule+0xda/0x1b0 [ 187.787180] rcu_tasks_one_gp+0x3db/0xc10 [ 187.787812] rcu_tasks_kthread+0x80/0xa0 [ 187.788428] ? rcu_tasks_postscan+0x10/0x10 [ 187.789030] kthread+0x2ed/0x3a0 [ 187.789538] ? kthread_complete_and_exit+0x40/0x40 [ 187.790221] ret_from_fork+0x22/0x30 [ 187.790798] [ 187.791134] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 187.792067] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.792819] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.793875] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 187.795015] Workqueue: 0x0 (rcu_gp) [ 187.795560] Call Trace: [ 187.795935] [ 187.796259] __schedule+0x893/0x2470 [ 187.796831] ? io_schedule_timeout+0x150/0x150 [ 187.797513] schedule+0xda/0x1b0 [ 187.797995] worker_thread+0x15f/0x1260 [ 187.798604] ? process_one_work+0x16a0/0x16a0 [ 187.799239] kthread+0x2ed/0x3a0 [ 187.799740] ? kthread_complete_and_exit+0x40/0x40 [ 187.800458] ret_from_fork+0x22/0x30 [ 187.801005] [ 187.801395] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.802300] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.803046] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.804098] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 187.805238] Workqueue: 0x0 (kblockd) [ 187.805794] Call Trace: [ 187.806154] [ 187.806503] __schedule+0x893/0x2470 [ 187.807043] ? io_schedule_timeout+0x150/0x150 [ 187.807717] schedule+0xda/0x1b0 [ 187.808225] worker_thread+0x15f/0x1260 [ 187.808829] ? process_one_work+0x16a0/0x16a0 [ 187.809486] kthread+0x2ed/0x3a0 [ 187.809966] ? kthread_complete_and_exit+0x40/0x40 [ 187.810675] ret_from_fork+0x22/0x30 [ 187.811224] [ 187.811635] [ 187.811635] Showing all locks held in the system: [ 187.812499] 1 lock held by rcu_tasks_kthre/11: [ 187.813117] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.814477] 1 lock held by khungtaskd/25: [ 187.815037] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.816355] 1 lock held by in:imklog/189: [ 187.816922] 3 locks held by syz-executor/4241: [ 187.817566] [ 187.817806] ============================================= [ 187.817806] 18:27:01 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:27:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x87}]}, 0x64}}, 0x8004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x1c0d05b71b5ff9d3) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x20000840) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x80c1) socketpair(0x0, 0x800, 0x9, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r6) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004080}, 0x8010) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) 18:27:01 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="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"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="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"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x480) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000c40)=0x80000000, 0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) 18:27:01 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2090020, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}, {@msize}, {@cache_loose}], [{@subj_role}]}}) r2 = accept(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/80, 0x50, 0x0, &(0x7f0000000300)=""/104, 0x68}, &(0x7f00000003c0)=0x40) ioctl$TCSBRK(r0, 0x5409, 0x5) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000400)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_vlan\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ah\x00'}, &(0x7f00000004c0)=0x1e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000500)={0x8, 0x5b85, 0x5c6, 0xe12, 0xe, "3ed8773e8841e819"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000540)={0xf31, 0x8, 0x5, 0x2, 0x18, "e2075c094dd4015a"}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x3028b8f51fb1a0df, 0x0) 18:27:01 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x1c040) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x3f, 0x21, 0xc0}, {0x8, 0x5a, 0x20, 0x3}, {0x7, 0x2, 0x4, 0x81}]}) ioctl$TIOCGPTPEER(r0, 0x5441, 0xe993) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x14) r3 = socket(0x1a, 0x1, 0x7) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r3) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r3) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c041}, 0x4000000) gettid() syz_genetlink_get_family_id$smc(&(0x7f0000000580), 0xffffffffffffffff) 18:27:01 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xe0, 0x5e, 0x6, @remote, @local, 0x1, 0x1, 0x80000001, 0x83}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x7f, 0x2, 0x20, 0x20, 0x2, r1}, {0x2, 0x5, 0x6, 0x9, 0x1, 0x2, 0x5, 0x1}, {0x8, 0x3, 0x7ff, 0xfffffffffffffffa}, 0x7, 0x6e6bb2, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x3504, 0x3, 0x2, 0x1, 0x401, 0x8a, 0x89d}}, 0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000340)={0x33, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x20, [0xfffffffffffffff8, 0x9, 0x6]}}]}, 0x30) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x4, 0x7, 0xfffffffb, 0x4d, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x20, 0x1, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @loopback, 0x0, 0xf750, 0x4, 0x500, 0xffffffffffffff0e, 0x8600002, r2}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', r3, 0x2f, 0xf9, 0x6, 0x40, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x10, 0x0, 0x2}}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000006c0)) r4 = accept(r0, 0x0, &(0x7f0000000700)) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000740)={0x1, 0x1, 0x9, 0x9, 0x4}, 0xc) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000780)=0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000007c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x6, 0x1b04cf0a, 0x0, 0x5, 0x4}, 0x5) r6 = accept4$inet6(r4, &(0x7f0000000800)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000840)=0x1c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000880)={{{@in, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r4) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0x9}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x3c}}, 0x4001) 18:27:01 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x126, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x800) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x402200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000006c0)={0x401, 0x0, 0x6, 0x7, 0x1000}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, &(0x7f0000000800)={0x6, 0x65, 0x4}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080) 18:27:01 executing program 7: r0 = socket(0x3, 0x4, 0xd398) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x40055) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x6) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0xe02, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}}, 0x2000000) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x1, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@cache_fscache}, {@cache_mmap}, {@uname={'uname', 0x3d, '\x16)@+#/^'}}, {@cache_mmap}, {@posixacl}, {@loose}], [{@permit_directio}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r4}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x40000, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@euid_eq={'euid', 0x3d, r4}}]}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4094) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x22a900, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x30, r8, 0x101) 18:27:01 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x126, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x800) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x402200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000006c0)={0x401, 0x0, 0x6, 0x7, 0x1000}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080) 18:27:01 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2090020, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}, {@msize}, {@cache_loose}], [{@subj_role}]}}) r2 = accept(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000240)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/80, 0x50, 0x0, &(0x7f0000000300)=""/104, 0x68}, &(0x7f00000003c0)=0x40) ioctl$TCSBRK(r0, 0x5409, 0x5) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000400)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_vlan\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000480)={'ah\x00'}, &(0x7f00000004c0)=0x1e) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000500)={0x8, 0x5b85, 0x5c6, 0xe12, 0xe, "3ed8773e8841e819"}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x3028b8f51fb1a0df, 0x0) 18:27:01 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="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"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="4ddbbee1f9526538b3aeffc79157d47f5c9cb85a0dce0c4f5469963399913530fd37868cc56357ab68ae66c52cec102892b7b3406bca2aa0051175291684c20905c36a75ef5a14dc327f6225ddf39fab3f4f78502042a6b4a7d5424f6608381e5a3877ee7207ab202947538a4951a38b5c32b301f3e4364bf98bc1a65379127721390abde1f885d6af500c0cf0d65c721c66c0179b0e072bdfa5fa449ed85587e2ef1789d166e1b3eed3a732ac51a7aa8012feedfeb7c025355940d50bac54471bcecef0ef53854aeb8fe08df3eb6cb82399a3353d6a5aba11fe022438c561f1c8d665b7ac4269811473fe47e023841a20680969a55befb1f8207ae9f74d9e90d7b040e7275f5e7f312c60b9aa1635095feda4e6ef7310030a71536aab7d5dca8eea49ce096eda87a0830c8783ac7388bf15e0529c82d617914c56595d9d5237247b6702b65a05dd92ae77b3fa8fa3503b4e3460399aa6a7935ae3413b1615724c41dec2f6f3080377c8dea7d6b2e7902c0b2d7cad208f48f94c3cd94bcd697d1626231040cd8a21611662a5517ee1d047d1e800eeaa35dfee4a10dd26655518d4baf1022bb0bf4f2c20f4619cb1116cf56847f5005a0275816dd2ec0695d71fbf851e4d00edcf9c3b5483196e3246efed6bf3dca5261cc1223d9526215e5bd4233b0ffe2153cca4aaee346a68f51e06f741343868bb5cb22734d40430db87cc91f08c128f3130eb34563b0115e7ee142679acd7e9bb687a9a4987207dc96d27ce645897f76ef08804304a507f82f220278167adf21641631f0bbc71474c3d5bb2361cb22eb78f3c4deb79eba23a83f83010424b36b57ee2decc2e903bf8f4f12bf9302eb29fd25a55922175981095720f049cec9103425c6d0efb78390ce2e4c8b398f3df04ccf8f65f1269c55bf6fc35ca668fda6b6e9033d63f79291488e694b146d85b0387685f5170eed1c61095674c0b1245d16466246e705b6ad4cf6ca46d56b9fcac7b2bbdd4f71c3ea9203352738711313639c828fcfbd79281a96728f728d5d42afccc122e4985fc7ed0783be352ab0d297fac4aa533d242bd7c00f50fca059f496e4b85ce668156d88607de90de8bca4f566544742c46ae6a2f0ae2f5699c2b6f05540a7bd77a0bea8190c0729a96015228028606548215e073bbf78c3813ef5b9855d71d539d95cb675ec3bb9fc20d1d69885dc7d4713940cb5aa971f86aab9535af0f3e86d9a6700254dfcfdf20a2c3a2ddcba8fccdf3f5da245d59d3a55b6c8ae3e079957f24ac94a1faa8053475b51c5e444db9700718931a789ccc1ce9e048003eab8a3a09cd64c335c811807201aa1ac34393ab04e7395dd6460f01054dd5db2f0316470d5265fc77d2e904da8cf47478faae42eaa727365a7584c8dfbb589adf8ba24d567351f03911f8167f0a0aeb16220c70ea5296a4"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000c40)=0x80000000, 0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) 18:27:01 executing program 6: move_pages(0xffffffffffffffff, 0x4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) setregid(0xffffffffffffffff, 0xee00) r0 = geteuid() r1 = geteuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x218420, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_none}, {@cachetag={'cachetag', 0x3d, '+&-'}}, {@aname={'aname', 0x3d, '*-&:-\''}}, {@dfltuid}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\\'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#*].][-\''}}, {@euid_gt={'euid>', r0}}, {@subj_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) geteuid() sigaltstack(&(0x7f0000ffb000/0x2000)=nil, 0x0) getgroups(0x2, &(0x7f0000000300)=[0x0, 0xee01]) getgroups(0x6, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) setresgid(0xee00, r2, r4) setregid(r2, r6) getgroups(0x4, &(0x7f0000000600)=[r3, r4, r5, r5]) openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0x882, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:27:01 executing program 3: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xe0, 0x5e, 0x6, @remote, @local, 0x1, 0x1, 0x80000001, 0x83}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@empty, @in6=@mcast1, 0x4e23, 0x3, 0x4e22, 0x7f, 0x2, 0x20, 0x20, 0x2, r1}, {0x2, 0x5, 0x6, 0x9, 0x1, 0x2, 0x5, 0x1}, {0x8, 0x3, 0x7ff, 0xfffffffffffffffa}, 0x7, 0x6e6bb2, 0x2, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x3504, 0x3, 0x2, 0x1, 0x401, 0x8a, 0x89d}}, 0xe8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000340)={0x33, 0x4, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x20, {0x2, 0x6, 0x5, 0x20, [0xfffffffffffffff8, 0x9, 0x6]}}]}, 0x30) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x4, 0x7, 0xfffffffb, 0x4d, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x20, 0x1, 0x7}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, @private1, @loopback, 0x0, 0xf750, 0x4, 0x500, 0xffffffffffffff0e, 0x8600002, r2}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', r3, 0x2f, 0xf9, 0x6, 0x40, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x1, 0x10, 0x0, 0x2}}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000006c0)) r4 = accept(r0, 0x0, &(0x7f0000000700)) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000740)={0x1, 0x1, 0x9, 0x9, 0x4}, 0xc) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000780)=0x3) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000007c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0x6, 0x1b04cf0a, 0x0, 0x5, 0x4}, 0x5) r6 = accept4$inet6(r4, &(0x7f0000000800)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000840)=0x1c, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000880)={{{@in, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8) syz_genetlink_get_family_id$fou(&(0x7f0000000a00), r4) 18:27:01 executing program 4: sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x51}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x126, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4805}, 0x800) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000680), 0x402200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000006c0)={0x401, 0x0, 0x6, 0x7, 0x1000}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x801040}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000080) 18:27:02 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'bridge_slave_1\x00'}) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000810}, 0x1c040) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x3f, 0x21, 0xc0}, {0x8, 0x5a, 0x20, 0x3}, {0x7, 0x2, 0x4, 0x81}]}) ioctl$TIOCGPTPEER(r0, 0x5441, 0xe993) r1 = pidfd_getfd(r0, r0, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x14) r3 = socket(0x1a, 0x1, 0x7) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r3) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$smc(&(0x7f0000000400), r3) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c041}, 0x4000000) gettid() syz_genetlink_get_family_id$smc(&(0x7f0000000580), 0xffffffffffffffff) 18:27:02 executing program 7: r0 = socket(0x3, 0x4, 0xd398) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x40055) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x6) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r1, 0xe02, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x70}}, 0x2000000) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x1, &(0x7f00000004c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}, {@cache_fscache}, {@cache_mmap}, {@uname={'uname', 0x3d, '\x16)@+#/^'}}, {@cache_mmap}, {@posixacl}, {@loose}], [{@permit_directio}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r4}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}}) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x40000, &(0x7f0000000640)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@euid_eq={'euid', 0x3d, r4}}]}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4094) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x22a900, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x30, r8, 0x101) 18:27:02 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x4, 0x3, 0x7}, 0x800, 0xff}) io_uring_setup(0x577b, &(0x7f0000000080)={0x0, 0x4e28, 0x20, 0x2, 0x2a5}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x5, 0x7f, "a1bbc009137eaffa62564b2544f062581d646e", 0xff, 0x202d}) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000580)={0xc9, 0x8, &(0x7f0000000180)="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"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f00000005c0)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000a00)={0x7f, 0x16, &(0x7f0000000600)="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"}) syz_open_pts(r0, 0x400) r1 = io_uring_setup(0x4c8, &(0x7f0000000a40)={0x0, 0x4b4, 0x4, 0x2, 0x1ab}) io_uring_setup(0x4878, &(0x7f0000000ac0)={0x0, 0xfb18, 0x0, 0x0, 0x3bb, 0x0, r1}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000b40)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000c40)=0x80000000, 0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000dc0), 0xc40, 0x0) [ 191.786382] Bluetooth: hci2: command 0x0406 tx timeout VM DIAGNOSIS: 18:27:01 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=1ffff1100710bf1d RCX=ffffffff81297e8f RDX=fffffbfff0d9a705 RSI=0000000000000008 RDI=ffffffff86cd3820 RBP=ffff8880382059b8 RSP=ffff88803885f8b0 R8 =0000000000000000 R9 =ffffffff86cd3827 R10=fffffbfff0d9a704 R11=0000000000000001 R12=0000000000000002 R13=ffff8880382059d8 R14=0000000000000317 R15=0000000000000004 RIP=ffffffff81297e8f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556fac400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5172cb2ac0 CR3=000000000dc72000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f840 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ecb584 R15=dffffc0000000000 RIP=ffffffff823bb0c1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a684692648 CR3=0000000005226000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4157baec00000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000