0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:33 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x0, 0x3}, 0x20) 06:33:33 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0x2}, 0x6e) 06:33:33 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x24, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8840) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040845}, 0x4040040) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) 06:33:33 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:33 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:33:33 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x27}, 0x20) 06:33:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x400c001) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) 06:33:33 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, '\x00', 0x0}}, 0x20) 06:33:33 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:33 executing program 3: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:33 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:33:33 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:33 executing program 3: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 06:33:33 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:33 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, '\x00', 0x2}}, 0x20) 06:33:33 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:33:33 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/user\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x1402, 0x4, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20000005) 06:33:33 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, '\x00', 0x5}}, 0x20) 06:33:33 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x3}, 0x6e) 06:33:33 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:33 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 06:33:33 executing program 3: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:33 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x17) 06:33:33 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:33 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:33 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x4}, 0x6e) 06:33:33 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0xf, 0x6d, 0x0, 'queue0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000300)=[{0x7, 0x7, 0x1, 0x80, @tick=0x2, {0x2, 0x3f}, {0x6, 0x1}, @raw32={[0x0, 0xfae, 0x3]}}, {0x1, 0x3f, 0xff, 0x0, @time={0x1, 0xf7}, {0x9, 0x1}, {0x4, 0x8}, @time=@time={0x4, 0x7fffffff}}, {0x50, 0x6, 0x6, 0xc6, @tick=0x73d, {0x7f, 0x9}, {0xd9}, @connect={{0xff, 0x8}, {0x7f, 0x4}}}, {0x9, 0x7, 0x9, 0x3f, @tick=0xb156, {0x5, 0x7}, {0x3, 0xff}, @control={0xe, 0x8, 0x1}}, {0x0, 0x20, 0xff, 0x0, @time={0x4, 0x3}, {0x1, 0xff}, {0x65, 0x81}, @addr={0xfa, 0x1}}, {0xff, 0x3, 0x4, 0x33, @time={0x5, 0x9}, {0x5, 0x4}, {0xd0, 0x1}, @addr={0xc1, 0x8}}, {0x0, 0x1, 0x80, 0x3f, @time={0x0, 0x8141}, {0x8, 0x1}, {0x4}, @ext={0x6d, &(0x7f00000001c0)="f79d9946bfae1c962307c9ea0a174bbf237dbc190f99c8626fffb4137085a5236df6e7da19cd3126b29b4ea423c5a88056d17c35c99f11468bb6d70582535fca1912b3a4789f5ec5d21f1894599658b93876ae086477b8a3e0ed123149caa5aaa9dc411b56233901beeb119cab"}}, {0x2, 0x9, 0x5, 0x80, @tick=0x3, {0x8, 0x1f}, {0x9, 0x3}, @time=@time={0x10001, 0x3}}], 0xe0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000002c0)=0xc00) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 06:33:34 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:34 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:34 executing program 3: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:34 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x5}, 0x6e) 06:33:34 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:34 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:34 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20000020) 06:33:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x59}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xcff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20040001) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x1c}}, 0x0) 06:33:34 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:34 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x6}, 0x6e) 06:33:34 executing program 3: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:34 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4280) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x4, 0x66}, {0x1, 0x2}, 0x8, 0x4, 0x1}) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:34 executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:34 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 06:33:34 executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:34 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x7}, 0x6e) 06:33:34 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) getitimer(0x2, &(0x7f0000000180)) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1302000900"/22], 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x14000000) 06:33:34 executing program 3: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:34 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x1404, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x8c0) 06:33:34 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x8}, 0x6e) 06:33:34 executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) [ 3005.647695] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 06:33:34 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:34 executing program 1: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:34 executing program 4: r0 = socket(0xa, 0x80806, 0x10003) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0xc0000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x26}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xff}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1400}]}, 0x2c}}, 0x8011) 06:33:34 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x9}, 0x6e) 06:33:34 executing program 3: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:34 executing program 1: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:34 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={{0x1, 0xf6}, {0x2, 0x4}, 0x9, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x243, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000180)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4040122}, 0x24044044) r2 = socket(0x6, 0x4, 0x8) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f00000004c0)=""/254, 0xfe}], 0x2, &(0x7f00000005c0)=""/145, 0x91}, 0x10000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100"/22], 0x1c}}, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8001}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x15}, 0x20000000) 06:33:34 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:34 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xa}, 0x6e) 06:33:34 executing program 3: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa}, 0x6e) 06:33:34 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="183700000300000000000000000000e91735000003000000000000000000000085100000fdffffff5119c0ff04000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0xc7, &(0x7f0000000100)=""/199, 0x41100, 0x6, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xc, 0x5, 0x1}, 0x10, 0xffffffffffffffff}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='flush_foreign\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="285a7c88ae9bab436747b4ba8f814c9afc0c2ad6b0ee2fb0427abd9794d3361b976d2357980eacb8edb3b6f39f96ecb32d1923fdd96635f51938cbc06918e38823a2de8ec63af4d0535641a4b7992c1b960bf6b206807d545e655f5f2126fe3fecb56acdf9e12981dd79334cf58cf6bfa6af0b3ea4862c6ad98e4b0975a00d624919c61ee8c0c9ca24945f58645cab"], 0x14}, 0x1, 0x0, 0x0, 0x4000091}, 0x8000) getsockname$l2tp6(r1, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000440)=0x20) 06:33:34 executing program 1: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) [ 3005.891522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 06:33:34 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:34 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010600e172d4064ac8b833988ecd43f4"], 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000280)={{0x7, 0x8}, {0x6, 0x5}, 0x10000, 0x3, 0x5}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r2}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000300)={{0xd1, 0x8e}, {0xa6, 0x6}, 0x4, 0x4, 0x5f}) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r2, {0xffffffffffff7fff}}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, 0x1401, 0x300, 0x70bd29, 0x25dfdbf7, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x44000) [ 3005.948818] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 06:33:34 executing program 1: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:34 executing program 3: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa}, 0x6e) 06:33:34 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfc}, 0x6e) 06:33:34 executing program 4: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x1, 0x8, 0x34, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x8000, 0x1, 0x1, 0xb}}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:34 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, r1, 0xc00, 0x0, 0x0, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x1c}}, 0x4800) 06:33:34 executing program 3: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa}, 0x6e) 06:33:34 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x300}, 0x6e) 06:33:34 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:35 executing program 1: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:35 executing program 5: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000914010027c77000fbdbdf2508000100025e4a000800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000100)=0x1df) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 06:33:35 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0xcf, 0x8}, 'port1\x00', 0xcc, 0x10403, 0x3, 0xfec0, 0x0, 0x9, 0xff, 0x0, 0x2, 0x1f}) 06:33:35 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x500}, 0x6e) 06:33:35 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:35 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:35 executing program 1: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:35 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1404, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000000), 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000000), 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 06:33:35 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:35 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="59876d0cf1e45b863ab6c9c2b4332d86d6c46f4e1fdd4274188dafd4f9bef8c896b4b84f8f2eec130044e8a42dece71f579e1e4f1776582789749007dbc1b0fa87a5680bfa2c1ef69a98220963fdcbc1b7cfe1a2818c8d501528ba612c737e37018723451fcae2c012c8a8c15b2fddf8d8bf324dba1c3d89f8e3b2ed77ae8e256e842e958cca3f41554d8c826c4d532a72d26a82b1f0882cd8e3", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800090000000000"], 0x1c}}, 0x0) 06:33:35 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:35 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:35 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000000c0)) r1 = socket(0xa, 0x3, 0x3) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x3, 0x6c, 0x5, 0x40, @tick=0x30, {0x0, 0x3}, {0xfc, 0xb6}, @result={0x1, 0x2}}], 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x40) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="040000000b4f94086bc7c4e10b000000c1023ab9551b6262f5c15e80a8b58a5a71ff930fb031dc44d33817a8da13de5d81e8463c85abfce471687c7f1560b3644f5bac56ec67962af493d4216da0012eb859905efa3e84cb3dc4cea156f87fd8758f232600e7549e1d1132ca3dcd8ab8a017a8c8163a43a5ce1b4e66b7b3e2895aca2623736c8ce30ce7b4b2000085622537b74d76fd42d6b8601c5d7f72d08ffb57a42ae0a9af0eec814b7ac17ad14bc247d0226d88f55abe9852580825a47c38", @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300000001000000010000a0050300008d6cd0b2e909da85"], 0x48}, 0x1, 0x0, 0x0, 0x20044006}, 0xc8010) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:35 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x700}, 0x6e) 06:33:35 executing program 1: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:35 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:35 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) read$sequencer(r2, &(0x7f0000000200)=""/146, 0x92) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x40, 0x9c, &(0x7f0000000040)="9099887ebef3242816751284dba16bbcd22ceae86dffe19aa668d903c0549175ee359e827365bdaaf8d6b3f6bdaebeaecebe8416b9c59e29739b84753b3bb68eabb99f9e605e999487464773211fe301a6b47a2c3df9dfdb07e6f5b984c16347ff814fb9b590bfc0e9e95712a6e416a19d3bb5fb3aed931db1beb49acec6a457febba583622901368fe4f4088aebd803566ba155dd92ef52fab33a3e", 0x8, 0xc4, 0x101, 0x121, 0x7, 0x0, 0x40, 'syz0\x00'}) 06:33:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000000)=@in={0x2, 0x0, @dev}, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 06:33:35 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:35 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x900}, 0x6e) 06:33:35 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:35 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x7654c2) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000080)=0x80000000) r1 = socket(0xa, 0x3, 0x400) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1b) 06:33:35 executing program 1: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:35 executing program 2: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) socketpair(0x28, 0x6, 0x8, &(0x7f00000026c0)={0xffffffffffffffff}) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x8890) 06:33:35 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xa00}, 0x6e) 06:33:35 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040), 0x0, &(0x7f0000000380)=""/225, 0x1, 0x2}}, 0x2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) write$vhost_msg(r1, &(0x7f0000000300)={0x1, {&(0x7f0000000200)=""/76, 0x4c, &(0x7f0000000280)=""/122, 0x3, 0x2}}, 0x48) 06:33:35 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:35 executing program 2: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:35 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x4000}, 0x6e) 06:33:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x10000000, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'rose0\x00'}]}, 0x28}}, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 06:33:35 executing program 3: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:35 executing program 4: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:35 executing program 1: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:35 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:35 executing program 2: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x20) 06:33:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f00000001c0)=""/77, 0x4d}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/105, 0x69}, {&(0x7f00000014c0)=""/219, 0xdb}], 0x8}, 0x10000) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 06:33:35 executing program 3: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:35 executing program 4: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000121400042dbd7000fbdbdf25080015000500000008000100010000a6"], 0x20}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000044) socket(0xa, 0x3, 0x3) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x7, 0x4, 0x1, 'queue0\x00', 0x3}) 06:33:35 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:35 executing program 1: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:35 executing program 3: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:35 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:35 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockname(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x40}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r0}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x800) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000140)=""/77) socket$inet_udplite(0x2, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) 06:33:36 executing program 3: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:36 executing program 1: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:36 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfc00}, 0x6e) 06:33:36 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x0, 0x7, {{0x29, 0x4, 0x2, 0x5, 0xa4, 0x64, 0x0, 0xf1, 0x29, 0x0, @private=0xa010101, @broadcast, {[@noop, @timestamp_addr={0x44, 0x24, 0x73, 0x1, 0x0, [{@rand_addr=0x64010101, 0x6}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x1f}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x200000}, {@local}]}, @timestamp_prespec={0x44, 0x14, 0x11, 0x3, 0x6, [{@multicast1, 0x7fff}, {@rand_addr=0x64010100, 0x7fff}]}, @rr={0x7, 0x7, 0xcb, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4c, 0x45, 0x1, 0x8, [{@rand_addr=0x64010102}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}, {@remote, 0x1825}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x5}, {@remote, 0x3}, {@loopback, 0x100}, {@rand_addr=0x64010101, 0x400}]}, @noop, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', r1, 0x10, 0x7, 0x1, 0x200, {{0x11, 0x4, 0x2, 0x37, 0x44, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0xd, [{@local, 0x1134}, {@loopback, 0x5fdd5d4f}, {@local, 0x800}]}, @timestamp_addr={0x44, 0xc, 0x1e, 0x1, 0x1, [{@private=0xa010101, 0x2}]}, @noop]}}}}}) 06:33:36 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:36 executing program 3: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:36 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfe80}, 0x6e) 06:33:36 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x400003) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000300)={{0xc1, 0x7}, 'port0\x00', 0x80, 0x10040, 0x8, 0x3ff, 0x65b, 0x0, 0x3, 0x0, 0x4, 0x9}) write$vhost_msg(r0, &(0x7f0000000180)={0x1, {&(0x7f0000000040)=""/12, 0xc, &(0x7f0000000080)=""/229, 0x2, 0x1}}, 0x48) r2 = socket(0xa, 0x3, 0x3) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:36 executing program 1: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x2}, 0x6e) 06:33:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180004008efdb00fe48ba1f690030000001401002abd7000fdf7df2508001f0055000000"], 0x18}, 0x1, 0x0, 0x0, 0x10000}, 0x8000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x40) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_team\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x80000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) write$FUSE_OPEN(r5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @ldst={0x2, 0x3, 0x1, 0xc, 0x8, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x90c71df}]}, &(0x7f0000000280)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41000, 0xf, '\x00', r4, 0x1a, r5, 0x8, &(0x7f00000002c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x0, 0x200, 0x4}, 0x10, 0x2a643}, 0x78) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1, @ANYBLOB="01fbffffffffff06000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004041}, 0x800) getsockname(r1, &(0x7f00000003c0)=@ethernet={0x0, @dev}, &(0x7f00000004c0)=0x80) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r6, 0x28, 0x6, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) 06:33:36 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:36 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfec0}, 0x6e) 06:33:36 executing program 3: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:36 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x20) socket(0xf, 0x0, 0x3f) 06:33:36 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:36 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:36 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xff00}, 0x6e) 06:33:36 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="00030000000415a918882bca5010b76ff8bc0000000000000000811c66a56aa712c02a2e38"], 0x1c}}, 0x0) 06:33:36 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:36 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:36 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = socket(0xa, 0x3, 0x3) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000cc863bf1d2efb8615e5e8420d34a3eaaa683ddf8fb5d3e2839573ca8a2272f69790cc1285b704be61572538d95d0a14d0cebfaea328675fd0a7e4827f2a4574256e0b40f94bb9e89830ac00e361965e23ef8594ae3483f0c88ccb8e2398feb5ab608f72a7c6d3551fe5877f9a18104b51094f4c42a630cba38520e421a88eb8750edc6274138f6d3e7b5990c976530d73f4b9edee00f646d71f2aeb535cfdc53e090861b768a8572cd4cddebcd4e1c234730d4da531dafb1e5cc6f307", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800090000000000"], 0x1c}}, 0x0) 06:33:36 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x1000000}, 0x6e) 06:33:36 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:36 executing program 3: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:36 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:36 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2000000}, 0x6e) 06:33:36 executing program 4: socket(0x2a, 0x2, 0x3) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1401, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20080010}, 0x40c4) write$FUSE_OPEN(r0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x480a00) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x40006, @mcast1, 0xffffcdc9, 0x4}, 0x20) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x80) 06:33:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 06:33:36 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:36 executing program 2: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:36 executing program 3: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:36 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x3000000}, 0x6e) 06:33:36 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:36 executing program 2: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:36 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001680), 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130200000000000000000300000006001d00000000000c0010000000000000000000"], 0x28}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f00000017c0)={&(0x7f00000016c0), 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x70, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xf}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6e50}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2e86}]}, 0x70}, 0x1, 0x0, 0x0, 0x4049010}, 0x40080c5) 06:33:36 executing program 3: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000004e6c369be9e44aa0000000800090000000000"], 0x1c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 06:33:36 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x4000000}, 0x6e) 06:33:36 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:36 executing program 2: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:36 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x91) getsockname(r1, &(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000040)=0x80) 06:33:37 executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) [ 3008.119502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3008.158105] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 06:33:37 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:37 executing program 3: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c6b8bd506e85ffaf90f48000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800090000000000"], 0x1c}}, 0x0) 06:33:37 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x5000000}, 0x6e) 06:33:37 executing program 4: r0 = socket(0x18, 0x3, 0x1000) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:37 executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:37 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:37 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x6000000}, 0x6e) 06:33:37 executing program 3: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 06:33:37 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, r1}) socket(0x11, 0x6, 0x80009) socket$nl_generic(0x10, 0x3, 0x10) 06:33:37 executing program 1: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:37 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:37 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x7000000}, 0x6e) 06:33:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) 06:33:37 executing program 4: r0 = socket(0xa, 0x3, 0x3) getpeername(r0, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @local}, 0x20) 06:33:37 executing program 1: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:37 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:37 executing program 3: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:37 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4041) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000080)) socket(0x6, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='fsi_master_acf_send_request\x00', r1}, 0x10) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:37 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000000}, 0x6e) 06:33:37 executing program 1: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x100, 0x0, 0x0, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x1000}]}, 0x1c}}, 0x6008044) 06:33:37 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:37 executing program 3: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:37 executing program 1: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:37 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x4, 0x2}, {0x3, 0x1}, 0x8, 0x2, 0x81}) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:37 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x9000000}, 0x6e) 06:33:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd0080204}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c080) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0xbf1a6293a9dbe434) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200028bd7000fddbdf2506000000050013000700000014002000fe88000000000000000000000000000108000a0800000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008085}, 0x8040) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3ff}]}, 0x2c}}, 0x4000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$FUSE_OPEN(r4, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20) write$FUSE_LSEEK(r4, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0xffffffffffffff6c}}, 0x18) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="7dcb0642f1923bd158570bc4b4472bfeab97cf856667921ed9034d7edae6444e80c037e3f15dbf0562f9ae3d237b54aa88b0dcc9033e64", @ANYRES16=r1, @ANYBLOB="01e8c2c02703e000"/17], 0x1c}}, 0x0) 06:33:37 executing program 1: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:37 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:37 executing program 3: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:37 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xa000000}, 0x6e) 06:33:37 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x8, 0x3fffff}, 0x20) 06:33:37 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x216ac3) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000340)={{0x0, 0x3}, 'port1\x00', 0x80, 0x40011, 0x6, 0x1, 0x6, 0x1, 0x3, 0x0, 0x6, 0x7f}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0x8, 0x958e, 0x4, 0xffffffff, 0x1f, 0xfd52}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000140)={0xffffffff, 0x7, 0x800, {0x20fc, 0x9}, 0x2, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000001c0)={0xc59, 0x10000, 0x0, 'queue0\x00', 0x8}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x200, 0x70bd2e, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000280)={{0x5, 0x3f}, 'port1\x00', 0x1c, 0x80423, 0xfffffffd, 0x520, 0x9, 0xfffffffb, 0x7f, 0x0, 0x3, 0x9}) 06:33:37 executing program 3: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x600}, 0x6e) 06:33:37 executing program 1: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:37 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0xbacc1, 0x0) r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4000000, @mcast1}, 0x20) 06:33:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x40143) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090000000000000000000400000008000900ffffffffca8f4deb5767c8b8ccf1d41fdcb9dba2938ec1bca40effb78c5673322c580e919ae4ddeb1126f3792579eb7e18a7d9e9c7c40805017f8f17d6310917471f71f7327c88077a44a0deabdf292331"], 0x27}}, 0x0) 06:33:37 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:37 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x40000000}, 0x6e) 06:33:37 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:37 executing program 4: r0 = socket(0x22, 0x2, 0x4) getsockname(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}}, 0x40018b0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r0, r0, 0x0, 0xd1, &(0x7f0000000000)="f47d1beebc179f5e57bdfe167596266f17db170afcb3289db31ccb935df73dd3388610455cdbfee7c72217dc0f8209e9b82ca65ef79ac7947822415cc5b4a6e193c9fa9f1f24a0787d7ea857e4b58239c74f437c6dcfe9a245c976b2d9ef5d7d88b761bee51ebd6edcde6180c395fb313af215dfbfc9e17b15f905ac56ba62aec44244c8ca90646ad1246fa478625adaec3604a78399d44f986fffe7043511e1da33ad6bc2c5af122c43db5ea40bb6b8f394724a2132d89dbbb2004ee3430c7e4763a845fd4394c6311cb6d6f4a60433ed", 0x6, 0x1, 0x0, 0x4, 0x6, 0x0, 0x1ff, 'syz1\x00'}) 06:33:37 executing program 1: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:38 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:38 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xf5ffffff}, 0x6e) 06:33:38 executing program 4: r0 = socket(0x4, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) 06:33:38 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:38 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:38 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfc000000}, 0x6e) 06:33:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="e52ade11", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800090000000000"], 0x1c}}, 0x0) 06:33:38 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:38 executing program 4: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="71971e00", @ANYRES16=0x0, @ANYBLOB="08002abd7000fcdbdf250800000006001d009548000008001800ac1414bb050005000000000014001f000000000000000000000000000000000106001a004e220000060002000100000008000c000400000006001a004e240000"], 0x60}, 0x1, 0x0, 0x0, 0x10000004}, 0x40) r0 = socket(0x5, 0x1, 0x80000000) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:38 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfe800000}, 0x6e) 06:33:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) 06:33:38 executing program 1: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:38 executing program 2: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:38 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x9000000}, 0x6e) 06:33:38 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfec00000}, 0x6e) 06:33:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000c400e4ffffff000400000008000f0451cc199382318f97002bb1090000000095e3540124b288582f44f5446891bd863668ff2c3fee97f68fca2a072f3ecb931e85593371a7f5856beceff0fd963397092c18dded166a75d4cbb72d465aec264358c24d5455168a1096a6a8c5b9382e253c2166cbcc6b4d8aecf6d314559f260c3f768fb36564b90aeae11a2c2f1057d34d3e065f7321e5f0e6ae66f14b7f2c861cfed145cf0f836e3eda252504da4a2928b1d8ea21617af9524458f1556c13a830561eec51db9633b5b50dda02067ebf4e7e"], 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x74, r1, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2eb}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xbb8a}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 06:33:38 executing program 2: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:38 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000002080)={0x20, 0x0, r0, {0x0, 0x4}}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = getuid() r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000008340)=ANY=[@ANYBLOB="78060000daffffff", @ANYRES64=0x0, @ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000100008000000100010000000000000009000000000000000100000000000000ffffff7f0000000006000000000000000100000000000000e2c2000000010000250000000080010020000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0700008a3c0000000000000500000000000000f8ffffffffffffff00000000ff7f00000500000000000000030000000000000063e0000000000000080000000000000004000000fffeffff00000000000000000300000000000000010000000000000009000000000000000900000000000000828b0000000000000000008008000000050000000040000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000700000000000000060000000000000005000000000000000a000000eb0000002f6465762f6375736500000000000000040000000000000003000000000000000200000000000000070000000000000004000000db33ffff05000000000000001f0000000000000008000000000000000000000000000000080000000000000009000000000000000001000003000000ff0300000040000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="8000000000040000000000000400000000000000060000000000000007000000070000005c2f213f05005200060000000000000001000000000000005e03000000000000090000000000000008000000940000000400000000000000550000000000000005000000000000000100000000000000008000000000000004000000000000000800000001000080010400000080000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000001800000000000000000000000000000004000000000000000b000000b80a00007b24213a2f2726ce2b2121000000000004000000000000000000000000000000e9090000000000000500000000000000ff0700000738000001000000000000000300000000000000008000000000000005000000000000001f00000000000000ff00000000000000ef210000ff7f0000ff7f000000c0000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffff000001040000000000000200000000000000cbe80000000000000a000000000100002f6465762f637573650000000000000002000000000000000000000000000000070000000000000001000000000000005c030000010000000000000000000000ff01000000000000c96f0000000000000500000000000000070000000000000000000000000000000104000000000000010001000030000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0600000006000000000000000000000000000000000400000000000010000000be0000002f6465762f696e7075742f6d69636500040000000000000003000013af00000006000000000000000100000000000000080000000500000004000000000000000000000000000000994f0000000000003f000000000000000100000000000000530100000000000000000000001000000100ffff0040000003000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="06000000ffffffff00000000030000000000000006000000000000000400000080ffffff2628292f000000000400000000000000020000000000000093668d1800000000e72a00000000000002000000000000020000000000000000d200000000000000030000000000000002000000000000000600000000000000f7ffffffffffffff060000000400000004000000006000007c0f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000e1040000000000000300000000000000ef0000000000000010000000010000002f6465762f696e7075742f6d69636500050000000000000003000000000000007f000000000000004200000000000000ff7f000001040000040000000000000000020000000000000500000000000000750000000000000000000000000000007e0000000000000006000000ff0300000600000000c0000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b002000004000000000000000600000000000000ff0700000000000010000000030000002f6465762f696e7075742f6d69636500040000000000000002000000000000000100000000000000020000000000000006000000f9ffffff02000000000000000000000000000000ffffff7f0000000005000000000000000000000001000000ff000000000000003b08000001000000000001000000000001040000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="241d00000400000000000000020000000000000001000000000000000100000000010000a100000000000000"], 0x678) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000002c0)={0x78, 0xfffffffffffffffe, 0x0, {0x0, 0x6, 0x0, {0x4, 0x6, 0x400, 0x9, 0xfffffffffffff9dc, 0x2, 0x7, 0x9963, 0x10000, 0x4000, 0x8, r3, 0x0, 0x10000, 0x4}}}, 0x78) write$FUSE_OPEN(r5, 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r7, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r7, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r8}, 0x78) write$FUSE_STATFS(r5, &(0x7f0000000140)={0x60, 0xfffffffffffffff5, r8, {{0x8, 0x7, 0xffffffffffffffe1, 0x9, 0xd38, 0x80000001, 0xfffffffd, 0x8001}}}, 0x60) read$FUSE(0xffffffffffffffff, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f0000000080)={0x90, 0x0, r2, {0x0, 0x3, 0x3, 0x800, 0x9, 0x7, {0x3, 0x0, 0x9, 0x7, 0xffffffff, 0x7, 0xfffffffd, 0x200, 0xfff, 0xa000, 0x3ce, r4, r9, 0x1, 0x8}}}, 0x90) r10 = socket(0xa, 0x3, 0x3) connect$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x20) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000040)) 06:33:38 executing program 1: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:38 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x5000000}, 0x6e) 06:33:38 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xff000000}, 0x6e) 06:33:38 executing program 2: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xc0fe}, 0x6e) 06:33:38 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x2000000}, 0x6e) [ 3009.638015] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 3009.668863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 06:33:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01220000000000215e9e616dd5b7ab00090000000000"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 06:33:38 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00'}, 0x20) bind$l2tp6(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xa0482, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x5, @empty, 0x0, 0x1}, 0x20) 06:33:38 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040), 0x0, &(0x7f0000000380)=""/225, 0x1, 0x2}}, 0x2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) write$vhost_msg(r1, &(0x7f0000000300)={0x1, {&(0x7f0000000200)=""/76, 0x4c, &(0x7f0000000280)=""/122, 0x3, 0x2}}, 0x48) 06:33:38 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:38 executing program 1: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:38 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:38 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg2\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5dae}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) 06:33:38 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040), 0x0, &(0x7f0000000380)=""/225, 0x1, 0x2}}, 0x2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) write$vhost_msg(r1, &(0x7f0000000300)={0x1, {&(0x7f0000000200)=""/76, 0x4c, &(0x7f0000000280)=""/122, 0x3, 0x2}}, 0x48) 06:33:38 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:38 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 06:33:38 executing program 1: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:38 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:38 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:38 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040), 0x0, &(0x7f0000000380)=""/225, 0x1, 0x2}}, 0x2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) write$vhost_msg(r1, &(0x7f0000000300)={0x1, {&(0x7f0000000200)=""/76, 0x4c, &(0x7f0000000280)=""/122, 0x3, 0x2}}, 0x48) 06:33:38 executing program 4: r0 = socket(0xa, 0x3, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:38 executing program 1: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:38 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:38 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040), 0x0, &(0x7f0000000380)=""/225, 0x1, 0x2}}, 0x2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) 06:33:38 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x2}, 0x6e) 06:33:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="018000004362", @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000800090000000000"], 0x1c}}, 0x0) r2 = socket(0x21, 0x5, 0x400) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x40) getsockname$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'sit0\x00', r4, 0x6, 0x20, 0xd1, 0x3, 0x0, @empty, @private0, 0x8000, 0x1, 0x0, 0xfffffff9}}) 06:33:38 executing program 1: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x6e) 06:33:39 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:39 executing program 4: socket(0xa, 0x3, 0x3) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x3d10d7d929f1f3f5) write$FUSE_OPEN(r1, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x5}, 0x20) 06:33:39 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040), 0x0, &(0x7f0000000380)=""/225, 0x1, 0x2}}, 0x2c) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) 06:33:39 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 06:33:39 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:39 executing program 5: ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000240)=0xfffffffa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x1410, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x200, 0x0, 0x25dfdbfa, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8180, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000040)={"bb59803973589195eaaeb4009bbb7cd785b45d3e2d5d861f6eb84ce8b42c", 0xd8f, 0x1, 0x0, 0x7, 0x939, 0x0, 0x1000, 0x3, [0x8, 0xca9, 0x9, 0x5f, 0x9, 0xa7, 0x9, 0x72f2, 0xdbf, 0x9, 0x0, 0x9, 0x6, 0x8, 0x9, 0x80000000, 0x2, 0x7, 0x4c]}) 06:33:39 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x3}, 0x6e) 06:33:39 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:39 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040), 0x0, &(0x7f0000000380)=""/225, 0x1, 0x2}}, 0x2c) 06:33:39 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x0, 0xd, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7e27e14a"}, 0x0, 0x0, @planes=0x0}) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:39 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:39 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x4}, 0x6e) 06:33:39 executing program 2: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:39 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200002) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xaa}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x81}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x400}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40085) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r3) 06:33:39 executing program 4: ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f00000000c0)=0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x9, 0x1, {0xfffffffffffffffc, 0x0, 0x7, 0x1, 0x10000}, 0x100}) r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000100)={{0x8, 0x6}, 'port0\x00', 0x20, 0x1e0c41, 0x1ff, 0x56, 0xb87, 0x1, 0x6, 0x0, 0x3, 0x8}) 06:33:39 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:39 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x5}, 0x6e) 06:33:39 executing program 2: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:39 executing program 3: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:39 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:39 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x3}, 0x6e) 06:33:39 executing program 4: r0 = socket(0xa, 0x3, 0x3) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000640)={0x18, 0x0, 0x0, {0x401}}, 0x18) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000140)=""/163, 0xa3}, {&(0x7f0000000200)=""/229, 0xe5}, {&(0x7f0000000300)=""/159, 0x9f}, {&(0x7f00000003c0)=""/220, 0xdc}], 0x5, &(0x7f0000000540)=""/132, 0x84}, 0x40012003) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:39 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x6}, 0x6e) 06:33:39 executing program 3: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:39 executing program 2: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:39 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:39 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) 06:33:39 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x7}, 0x6e) 06:33:39 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r0, r1, 0xfff, 0xc2, &(0x7f0000002240)="63b97d53fb5fc5420eb554ff59f3a67a122408fc842604a67c87456e56d4f290374735aaaca3cd348d4e5376a9618266ba24fad65c946b22c05d0c408accf6ff40c6420bcd76ebd4b4e9c4c099c638fb633b446393b49ac79bd3f9856f7e38754f19817602c1fd819830be3869e634728ff8569a534e649858ce19fe62522734f6188daca9b9e39d1b61887e6ffb370e3127e765f708621265d15ab508cff9f751deb3722f81d4942d6b6b32fa5c18a525594723fb5549072b984ef903057f83244a", 0x1, 0x81, 0x1ff, 0x1, 0x9, 0x1, 0x8002, 'syz1\x00'}) socketpair(0x27, 0x5, 0xfe7, &(0x7f00000000c0)) r2 = socket(0x28, 0x6, 0x3) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000080)={r3, r4/1000+60000}, 0x10) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:39 executing program 3: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:39 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:39 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:39 executing program 3: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:39 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040), 0x0, &(0x7f0000000380)=""/225, 0x1, 0x2}}, 0x2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) 06:33:39 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x8}, 0x6e) 06:33:39 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:39 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x140c, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x8800) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getpeername(r1, &(0x7f0000000040)=@l2tp={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x80) socket(0xf, 0x4, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) socket(0x1d, 0x5, 0x1) 06:33:39 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:39 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x9}, 0x6e) 06:33:39 executing program 3: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:39 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040), 0x0, &(0x7f0000000380)=""/225, 0x1, 0x2}}, 0x2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) 06:33:39 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:39 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xa}, 0x6e) 06:33:39 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x9}, 0x6e) 06:33:39 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000080)) r1 = socket(0x2b, 0x3, 0x3) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8}, 0x20) read$FUSE(r0, &(0x7f0000000d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, r3}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0xa6000, 0x0) connect$l2tp6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x5b5f522a, @private0, 0xfffffffc, 0x5}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000031420002bbd7000fedbdf250900020073797a310000000008004100736977001400330076657468494e4e92e4ac315f746f5f68737200000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40030) 06:33:39 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040), 0x0, &(0x7f0000000380)=""/225, 0x1, 0x2}}, 0x2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) 06:33:39 executing program 3: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:39 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xfc}, 0x6e) 06:33:40 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:40 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xa}, 0x6e) 06:33:40 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c804) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r3 = getuid() r4 = getgid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002080)={0xa0, 0x0, r2, {{0x6, 0x1, 0x8, 0x8, 0x8, 0x4, {0x3, 0x6, 0xaf, 0x2, 0x2, 0x5, 0xfffffff9, 0x7f, 0x5, 0x6000, 0x19c0, r3, r4, 0x4, 0x7}}, {0x0, 0x10}}}, 0xa0) 06:33:40 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00'}, 0x20) bind$l2tp6(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xa0482, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x5, @empty, 0x0, 0x1}, 0x20) 06:33:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) socketpair(0x28, 0x6, 0x8, &(0x7f00000026c0)={0xffffffffffffffff}) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x8890) 06:33:40 executing program 3: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:40 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x300}, 0x6e) 06:33:40 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) socketpair(0x28, 0x6, 0x8, &(0x7f00000026c0)={0xffffffffffffffff}) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x8890) 06:33:40 executing program 5: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x1, 0x8, 0x34, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x8000, 0x1, 0x1, 0xb}}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:40 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200000) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000080)) r1 = socket(0xa, 0x3, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:40 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x500}, 0x6e) 06:33:40 executing program 3: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:40 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfc}, 0x6e) 06:33:40 executing program 5: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x1, 0x8, 0x34, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x8000, 0x1, 0x1, 0xb}}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:40 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:40 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) connect$can_bcm(r1, &(0x7f0000000040), 0x10) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) r3 = getpid() write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0xfffffffffffffff5, 0x0, {{0xffffffff80000001, 0x4567, 0x1, r3}}}, 0x28) 06:33:40 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x600}, 0x6e) 06:33:40 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x500}, 0x6e) 06:33:40 executing program 5: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x1, 0x8, 0x34, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x8000, 0x1, 0x1, 0xb}}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:40 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) socket(0x6, 0x803, 0xb7) 06:33:40 executing program 3: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:40 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x700}, 0x6e) 06:33:40 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:40 executing program 5: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x1, 0x8, 0x34, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x8000, 0x1, 0x1, 0xb}}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:40 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:40 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x900}, 0x6e) 06:33:40 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180100800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, 0x1403, 0x300, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8806}, 0x4880) 06:33:40 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:40 executing program 3: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:40 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:40 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xa00}, 0x6e) 06:33:40 executing program 4: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000040)={0x0, 0x3, 0x1}) 06:33:40 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:40 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:40 executing program 3: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:40 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x4000}, 0x6e) 06:33:40 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:40 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101100, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x1404, 0x400, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0, 0x2000000}, 0x20) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x725982) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f0000000080)) 06:33:40 executing program 5: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:41 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x80fe}, 0x6e) 06:33:41 executing program 4: socket(0xa, 0x3, 0x3) 06:33:41 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:41 executing program 3: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:41 executing program 5: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:41 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xc0fe}, 0x6e) 06:33:41 executing program 2: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:41 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:41 executing program 4: r0 = socket(0x1d, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:41 executing program 3: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:41 executing program 5: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:41 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xfc00}, 0x6e) 06:33:41 executing program 2: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:41 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:41 executing program 3: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) [ 3012.485037] can: request_module (can-proto-3) failed. 06:33:41 executing program 5: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) [ 3012.518422] can: request_module (can-proto-3) failed. 06:33:41 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xfe80}, 0x6e) 06:33:41 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4080) r3 = socket(0xa, 0x3, 0x3) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:41 executing program 2: socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5}, 0x6e) 06:33:41 executing program 1: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:41 executing program 3: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x6}, 0x20) 06:33:41 executing program 5: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:41 executing program 4: r0 = socket(0x10, 0xa, 0x80000000) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x3}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x90}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008820}, 0x4004840) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 06:33:41 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xfec0}, 0x6e) 06:33:41 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:41 executing program 1: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:41 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:41 executing program 5: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:41 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xff00}, 0x6e) 06:33:41 executing program 4: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) socketpair(0x1, 0x80000, 0x9, &(0x7f0000000040)) 06:33:41 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:41 executing program 1: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:41 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:41 executing program 5: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:41 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1000000}, 0x6e) 06:33:41 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) 06:33:41 executing program 1: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:41 executing program 4: socket(0xa, 0x3, 0x3) r0 = socket(0x26, 0x8000f, 0x8) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20}, 0x20) 06:33:41 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:41 executing program 2: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:41 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x2000000}, 0x6e) 06:33:41 executing program 5: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:41 executing program 1: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:41 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:41 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r1, &(0x7f0000000680)=@ipx, &(0x7f0000000700)=0x80) r2 = socket$l2tp(0x2, 0x2, 0x73) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000001c0)=""/14, 0xe}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000280)=""/56, 0x38}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000380)=""/12, 0xc}], 0x6, &(0x7f0000000440)=""/134, 0x86}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r4, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002bbd7000fedbdf250800000014001f0000000000000000000000000000000000060001000100000008001700", @ANYRES32=r5, @ANYBLOB="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"/305], 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x20000084) 06:33:41 executing program 5: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:42 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x3000000}, 0x6e) 06:33:42 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x20) 06:33:42 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:42 executing program 4: write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x9, 0xff, 0x97, @tick=0xfffffffc, {0x81, 0x1f}, {0xff, 0x8}, @note={0xd1, 0x0, 0x7, 0xf7, 0x3}}, {0x6, 0x6, 0x8, 0x5, @time={0xfffffffd, 0x7f}, {0x4c, 0x6}, {0x0, 0x6}, @raw8={"61968fea9eb6ae340824b07a"}}, {0x2, 0x7, 0x11, 0x3a, @time={0xffff, 0x4}, {0x1, 0x2}, {0x5c}, @raw32={[0x4, 0x10000, 0x15]}}, {0xa, 0x9, 0x9, 0x1, @time={0x46, 0xf56}, {0x20, 0x9}, {0x1f, 0x2}, @queue={0x5, {0x7ff, 0x574}}}], 0x70) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x10800, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0x5, 0x1d}, 'port0\x00', 0x25, 0x80004, 0x2, 0x5, 0x5, 0x80, 0xd7c, 0x0, 0xa, 0x5}) r1 = socket(0xa, 0x3, 0xffffffff) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x208100, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000100)) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @private1, 0x80, 0x3}, 0x20) 06:33:42 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x4000000}, 0x6e) 06:33:42 executing program 1: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:42 executing program 5: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:42 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x20) 06:33:42 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:42 executing program 4: r0 = socket(0xa, 0x3, 0x3) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000200)={r1}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001cc0), 0x8080, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000002d00)={0xffffffffffffffff, r0, 0x7, 0x1000, &(0x7f0000001d00)="90cf46102ddb6ecd4bac2768b225c1b83b3735d70cf9601b2f7b06abd573cd58c4d58564132afb9823e8f5bb5aaf160745c1159467d506354227ecbbb06f574a35b53b8e100344bc12f5011e03c071597100cb4d523d3f65b5e65e52be0a59adf26da928438fbf072684ab405a66277752c56d5d013f311501755609295debcd43700df2d06e3eb1b02c851d7a7272ec6f3b3efc4339a698927a67cb268dbe0d0edbeacebbd691e25e832bedcccccc201846c3c1d233ebe5cecec6f6a0cdafa438951bf9733093cac9a9658d5319ad598026d302c7f2f8dcadf50311c6961f83c026004b2b1c5c30abc10e3e1e48eaa824564f94f9a4822c2cdbc48bcfa4ce1919273f622ca73f12e6853027ff529e1f2fb08144e1947f5cc097ac934ddd163fc952cd7a91884cc3b25aa80ce43e260b930337514587094abb89e396f5e80748cd39d56585b77bc1e9316a8c671978bd07fdc632b803abac0da493bab8a19e3e87fdec31582fc5c6cfd63a912d8b9e1e59f6a7c94d4d04c6b29d08638179f81b85d366d62eceb51d746fa580c9104d383401b692148496ee7295d26d6e7f30088ffff800fb959c82dca80ff8c2a3ff99a3d0845e4e3f350631c3147ea2066263224e7c6dcb5c220e150e36ed506b54567f1dbc94729836110130e9341b07799c204e1d2839c3582e0384f4b99ec488d15e046fa4970c95dd1c172bc2dd5d719e6eba51da04bb53259eaae5656ebf5c63da336e70007208356472686397b24509f8719788e01124f3bee6551db67b4eb959d45a27b5d84f502772d66b6d57df1124140e1614a1f46bd697b9ace31ea32139a707cc7555153bee8b4051611c22098d4e0df30e27d0f758340c45e07a5ad976bdd4f82bb94af542d6820f04fae362f3df5abbf448e627aea759631398813edc9a68cdac3504f745602a56f0205a82ed6f8fc6965841a9e473b4d62edfd9a1085b4d4a3e3bfb51683bfacd021b50f2074cf8c7ee0d475b8add036ee5c97eb5288fab7eacfc7224846c17604b3b3997c78c0f8d03b14ae63d864d64a68ef4e8d75e4a6162e05ceaa96a501a465dd196ac48d22b7a28eef3604805f88ea97d8ae5317b240ef0a022f364a185331d6494f8f52ce1a1943cd1dfc900bb7c440bc52fcc745f7bd8edd1e8c2f81cb3d6ff0fdf5a2085441208fa1136b1f4b458ff046873a807bb96ce21469b238850b238bd4978093374b567fbc01eb240a4003b52ba0e93ef888d84918e04c85a23f6ba232c43386681777cfc4feae2664e2b0577662b319f42fe92a1b1923e4f4b1ae14f77b2ffed8528f6ed28afed926f69de6280b3a248c942054e4d772e6d78cc1e619ff48da57a0302ca28a2cd2859a039aae8ae164514f2d4f9f9934085e8dee403898f66d94c611ae69429ede17098746d987d1f2311999fbc7c0ff4bbe3d79683e7cf5f46f6fe623893b86312be46f6746731a7216aaf2e20b774c6a7fff10da0d8619f468131ffb6302a52f1f18774e3b1b5899f7ad7a53d02c8fd1cc3f5e02b144df4ad23d407f056dc7b96e03ba75d134ffeb891d9ef24123df88e5225f66ebeba4eadc20ebb6ccb2c019148ad1512f0b7e90aa67ceacb6e288249f2e90934c452977300ac814277e3227fd671b014f8876bed3ed0c8a46f255550bd2e3c298c74424541366969396b3e226def3b1af67f7e75429b63e57869014faf91736bb18da7b06f9a395e8259bd0ee7d3a6951e74edb85ec4f844a0aab2d1223d032d8942690a8dfa1983a152f7541e691cc09ef15d130f51595f47bf7fde01ca1b61dd2843b67c5242833031e5229bbc799edf351a9d82f250cb748e86652d0f38fdc15ff8952eb10bb9fdbbe3ab707ea7363084df4b43f3558423488a9d2d2a1f3b70c1428c50c4bde2c44f2ca4aab8deb8895faf568d7fbfb15aa6f7c2f4b2d254a6e67a79e080cd506c17368737cfb0db9f39de5d9d6330afd16cb134afac410d071c988a9ee34ec9956fe4fe8efeaf390138b2124ced7e6a047000d555d581906e190daf0046cbdada201a09a9bd33a59d347cfddb1057b0045cf48fd4a5ac8493ffb3f32aaa9623042ba9a54febe42d7a447d303ef32bc8634bb3e005a1f7d3d956da6f30dbc1482f831001fc28b46a59bae2ac08209ccb15e0a1436effb994739edfe23b053f820f3551ef47e02d9b157f700df882a08ffb5e9e5eefba1d18936cdb94a184bc786e41b6df0667b921acd7a40c8702ab044c3e41cb8a558230c5965e2cad5edae9ad1129fa35a197b8b98fe55425f0813af1b80b0f7b403bc688e8a5a655f0b85269bdb8b509ea2639864d07e4280fa085c533be36784470883d3e805f8e9c1a60d9235da3bc2490f3c391bc136243215092928ba8f46f29c387f6e6d5e754ddd4468007e010fd3395df6dd19f89f06bde18d3ae6c2fa02bf25fece13f0b977c23dd05ee3d3ce9b79d3b7d0a596f1575054c86759c8f581fa98011b77ddcbf36a3ab85ca8952b6b5ef5a44441840f880306e84d4ce30395240de9b0023e37289d53753020f32aa1aaf13f113217d9febb8eb10840080ba4cde29bd30e0a732e023e9b96d8631954f3c8c80253a599ac95d222113d81c0a95436315e13207a1854c5744926035a616202122aa6d7d06bd22a82def2bc5510375e0fc4661a66874b16bd7dba7ccf4df1bfba2862898a5bb2ce0f023e5c541e8e8987ee2369634c99d41a9df2fb4207aa00c1d8ac453e3213da964c08bcddb5f01b4061d0dd82025e59fbe373560d327b323364c7354a605387a3e43fb92e252d97c59e6b21f5741d7f54e5ae63cdf7bcb2c3e497fa23c474e908e3a9eea7df7bfbad408a83dbedf0b743185039a3f9121e13224046b5a2a3b13ac5a205fd446240967f3455e0bd25b50888e7d8c63deef755a99db343b238e322be3d6b4df2faeafc6e53ecb14c2efe395b6d3eb65e8c622a6ee6ed4d2fa436f9d9973272869289266f056151ae2f8e133221001d174eefd45c1e952a36c9b2cf9870160ee3a89bf0004e573bd88cd57fa1c360bf2ec19f4510a3fe347f7700f0935ca61ea0c7288d63727ac551d2a6e96cf2a4d7e6394bf3c8b6939413815db83756984375040376a4937232dcdce4ed25ff62c65931891995a43fd595a179eabceb2769c99af9cc9dca2640df86ff632f44ce5b91cd827833e0fc2bfdc070ab485d22bad68b90aac9ed71cbc9d2071ee32f6c27a71bb5076e76aec5e0e719dffd97a73c4031917c7070c59492e70bc1a8c6b1d93692591da067c35c9eaeb2efef5be1db7563edc579aa573b05e009320681fc06c7c6b2bb920545441190f755931462c0b0e68d8da23ca2e0b76a6c93a27ec29dd18c46dd77f304e964b507db501534a5312538afd69a45bdc78a3ee2f08b9ac7a9e4e7bd32282855e7574dedcfa9df157d015d62431b171c36be1297d8f6760b12699f3ae1090c276b2404b816fec34e2c1c7aaa06f920abf8e8f596ee3ab0f9a587262e1d7c73de04f75fc3dfd244730da7415d7fb01ac720ac6ef79529ba656b8945223f174472039d95f1a18b98ecea1b45609bad5438b5d1eb0eae43af3a64d75d69471f1bb3dfa46853279ffd2227b25c16e83c08a1244ae30d4353a4d9b77264f633b5cb25e81a8afff161f4e6f6de57f788d26d476a1df3a88e4329e9983827c25d63ce1bafeee8ecebf529db72b364033625d12334c8d40fb5ccc85be2cf09afcdf8f2558468952245a87c07002212b601cdd3b21f19cd90c328db6284388ae23d99ddf7e6babcfd105bc98db294d146011ee96474d590995b0e603d91ef3bbc49306836c07da7ec3f0b78fc9d9b900e30426aba46e94736e9271bea9d1bf0d6c8ac235775aba88e16f449a4a24177367c74a84c6aea770197409173449cfc51f16de48a4e21acf2543b485b3c8406b894a9eca654aa8702f446538f16360f1e173f3177ca139a12553697144e685e020cc941f880c4818e429a665663b0cbe1cb18119e529e259fe87abd6e64a14ef2c059f69abce78dba34bfcd86a479469be874fe5b07dac94bf5b10df06528d2f1afdf3f97edb70dcc1c482cd0e727bac289e4ebc21a4ea8d1a75d09089d743b8a20838d854c902a4df90771a2a9594fc32dd51a7260c1f9acfca50450d671fdf48c84d4e3e7effcb38f1c6281447540735b56530b057c3b23bdbdcf11141f6cddf8fc111fa12d114a6af1a95a78d46907f1353bcf7f5ec4975c2dcc4d1fc5bbc7611e69fae1b49ea919a1bbe38989fea96ea4ca9fa3a8c836ab66561e8491ff4f7d187a2b4850b975f8ca365ab4dbbee7b1a0d147ca6962ae01c7948f9b80d0160747db2a50cfba785d06304c9b64866b8e709756efe0886160970d640da51e4b91d5df423ab185bac992e028f7a9d37e0a14dc0a3842d93f35dd9ca7a1f9e9d2393cbda43cf2e9679f94eb62d7b2922a00cb830f3c560a255c096a4493334e930e8286000cfd4bfc254c26b07af26a7f3febb965afd7802bafedee78710150c8958b1c8480547a87f0268e9c88fe345b685a9074d2c0dcd8b8a8e7d544a87886993c7997d3d97be0f07619b1d01dcf3ac6fb51a578365f56f2d708a97c9b9a7ac5d4f74ae93cff87c0279050859aa7e9614f1650a59ea1bef4d33f7e886adfffb858094f65443213450b93f7fdb05e487fd55f4aa8e04ce88171b6d3e644d9ff2a2c6b283111905bc51db2319b9c5798c23a9f50d6094dc16c96bad28e02ab02e036ccf23166e21fa1f21a51f0fa071fa986601d63e7b3d9f601fe1cacfe527827e6bb30a4bf45dd85895ca2ddb107f1117aa477c7c7154e9e26b929cb25b49ef352b413c3cde45cbfb26fce056f2509bb2010e89e328d3466e2ba8b51c9e53ad93686664d2d81c4db6d7492f1c79d393d93e6246f49a06038fe16e3c56befe43a97e28e3bd09ce920d589cf0cff7b027b74fe93e67cbb233df98ea7261b97efbe4470ae35a284485e7489b202bc5ec84fe047581ce2e9ec3cd48866c2838f346e3632fe40925220cb576483e3d8de2b461b530ebb9067ffc1042cb8175a9e574490e4f077ba3aa7ea2adc3fb85f5cdb2455fbda76f5a8fc79815ac1f74763c8b72c25810564a26763288a345c7cbc19a7aac660aaf9ad9d8608009ee3f049842823b1a87e2d5daca43c5cb2f86bd61418f93e759a176d47a51a08f833add71f38ec950537723f6254ce73549e5191330f8aa9a4045c2f44f3cd266d7313aac6ef9a625b9a23ed56d7570ba2353537ff4fa530ceb9265cb7a26815268cdba9d675eb48131758a140051450fea65795f0bfbd972ee43605f8f28b2a1d025b92798501850b812278d06f64a9f999908ad7db77ba1075c5ce34364cecfab35384f4536c74c7bc876ada02bb61115506dee78f0ebb05cf2d7b0ad9b33cb92c6c6f6767cfa326e837816875eab5fcd5d6856542a6366d26c7112d7ef2c458cb52da22a02ba0d507768d792409e1e06caf20c507cd8cdb2fb723a74aa297029f3c7c7461b0fa2ba4dd1ce2a929f00e5f4238b959776e5a98bb15df2e5b0042f7c26b003074116f973a632265574b94848b469949d84d7b0e85339c090f90f16749547169dc8ceb0af66bc1470e1f17678a23545d5fa7d6334e0de358c563b8a097ad5fe5fae5e58e0f03e240ff1ae2d794dcbb411a630fea2c974f76ce4e2c246ae6894363d15aecc892c5bb52592f8c37554da9a5ea233e1e66efb329f00bb38ecb641e61de074e079aa9a1baefdec2508cb2984980e4116cf793d829af368d34f", 0x7f, 0x3, 0x64f, 0x5, 0x2, 0x2, 0x4, 'syz1\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYBLOB="0001001000000004000000074c0100b000640000fa2f9078ac1e000100000000861efffffffd070823c321e9e5bc05106b3713eec5bfd0bf7837af9fdb828307e9e0000002444ccc63640101010000ffffac1e0101000000070a010102000000000a010101000054d9e000000100000cd80a010100000000026401010000000040ac1414bb00000003ffffffff00000400072723ac1e0001e0000001e00000010a010100640101027f00000100000000ac1414aa0a01010101000000"]}) 06:33:42 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x20) 06:33:42 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x5000000}, 0x6e) 06:33:42 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:42 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x3000000}, 0x6e) 06:33:42 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x6000000}, 0x6e) 06:33:42 executing program 1: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:42 executing program 5: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:42 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1000000}, 0x6e) 06:33:42 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) socket(0x21, 0x2, 0x8c9d) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) socketpair(0x2a, 0x1, 0xff, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x10085) write$FUSE_OPEN(r4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa01000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x40) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:42 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xfe80}, 0x6e) 06:33:42 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xfc00}, 0x6e) 06:33:42 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x7000000}, 0x6e) 06:33:42 executing program 1: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:42 executing program 4: r0 = socket(0x18, 0x3, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:42 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x6000000}, 0x6e) 06:33:42 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x8000000}, 0x6e) 06:33:42 executing program 4: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1409, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c5}, 0x20000000) r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:42 executing program 5: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:42 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x7000000}, 0x6e) 06:33:42 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xa00}, 0x6e) 06:33:42 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x9000000}, 0x6e) 06:33:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/user\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x1402, 0x4, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20000005) 06:33:42 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xa000000}, 0x6e) 06:33:42 executing program 4: getpeername(0xffffffffffffffff, &(0x7f0000000700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x80) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2, &(0x7f0000000080)=@raw=[@ldst={0x0, 0x3, 0x2, 0x7, 0x3}, @generic={0x9, 0x1, 0x2, 0x29, 0x3}], &(0x7f0000000040)='GPL\x00', 0x597, 0xb5, &(0x7f00000000c0)=""/181, 0x41000, 0x8, '\x00', r0, 0x0, r1, 0x8, &(0x7f00000007c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x8, 0x8, 0x6}, 0x10}, 0x78) r2 = socket(0xa, 0x3, 0x3) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:42 executing program 1: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:42 executing program 5: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:42 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x3}, 0x6e) 06:33:42 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:42 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x1}, 0x20) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x40202, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000080)) 06:33:42 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x40000000}, 0x6e) 06:33:42 executing program 5: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:42 executing program 3 (fault-call:1 fault-nth:0): r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:43 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xf5ffffff}, 0x6e) 06:33:43 executing program 4: r0 = socket(0x5, 0x4, 0x3) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x0, {0x7, 0x0, 0x4, 0x8000}}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:43 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:43 executing program 1: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:43 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:43 executing program 5: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty, 0x100, 0x2}, 0x20) 06:33:43 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xfc000000}, 0x6e) 06:33:43 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:43 executing program 1: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:43 executing program 4: r0 = socket(0xa, 0x3, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000040)={0x4, 0x7f, 0x1, 'queue0\x00', 0x4}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) 06:33:43 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:43 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:33:43 executing program 1: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:43 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xfe800000}, 0x6e) 06:33:43 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:43 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:43 executing program 4: r0 = socket(0x23, 0x1, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0xa0042) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xddbd245b95d567da}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1412, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x6000802}, 0x40040) 06:33:43 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:33:43 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:43 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xfec00000}, 0x6e) 06:33:43 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:43 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @dev, 0x6}, 0x20) 06:33:43 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:33:43 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:43 executing program 4: r0 = socket(0x5, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:43 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:43 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @dev, 0x6}, 0x20) 06:33:43 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x100, 0x2}, 0x20) 06:33:43 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xff000000}, 0x6e) 06:33:43 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:43 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x4, 0x0, @dev, 0x6}, 0x20) 06:33:43 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:43 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0x2}, 0x20) 06:33:43 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xfffffff5}, 0x6e) 06:33:43 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r1}, 0x78) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, r1, {0x80}}, 0x18) r2 = socket(0xa, 0x3, 0x3) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa400) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x18, @time={0x8, 0x80}, 0x0, {0xb6, 0x4}, 0x3, 0x2, 0x7f}) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:43 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xff000000}, 0x6e) 06:33:43 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:43 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x5, 0x0, @dev, 0x6}, 0x20) 06:33:43 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:43 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x17) 06:33:43 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:43 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe789, 0x3}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f00000020c0)={0x20, 0x0, r2, {0x0, 0x8}}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:43 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x6, 0x0, @dev, 0x6}, 0x20) 06:33:43 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:43 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0xfe800000}, 0x6e) 06:33:43 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:43 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffc00, @private2, 0x8001, 0x1}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:43 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x2000006e) 06:33:44 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x7, 0x0, @dev, 0x6}, 0x20) 06:33:44 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe789, 0x3}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f00000020c0)={0x20, 0x0, r2, {0x0, 0x8}}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:44 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:44 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x20) 06:33:44 executing program 0: socket(0x9, 0x3, 0x6) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40001, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x10) 06:33:44 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:44 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x8, 0x0, @dev, 0x6}, 0x20) 06:33:44 executing program 1 (fault-call:1 fault-nth:0): r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:44 executing program 0: r0 = socket(0x6, 0xa, 0x7) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:44 executing program 5 (fault-call:1 fault-nth:0): r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:44 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x9, 0x0, @dev, 0x6}, 0x20) 06:33:44 executing program 4: r0 = socket(0x2b, 0x5a19f2feb2583b2f, 0x3ff) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', r2, 0x29, 0x28, 0x81, 0x90b, 0x0, @empty, @remote, 0x2f, 0x40, 0xf, 0x6}}) 06:33:44 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:44 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 06:33:44 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:44 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:44 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0xa, 0x0, @dev, 0x6}, 0x20) 06:33:44 executing program 4: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000efff00000000000000", @ANYRES32=0x0, @ANYBLOB="004000070000003f000000044820002000670000d504907864010100ac1e01014408f7a00000010186020000"]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f00000006c0)=@raw=[@alu={0x7, 0x0, 0x4, 0x9, 0x3, 0xfffffffffffffff0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x1, 0x0, 0x8, 0x8, 0xc, 0x8}], &(0x7f0000000700)='GPL\x00', 0x20, 0x0, &(0x7f0000000740), 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x4, 0x3}, 0x10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x8, &(0x7f0000000140)=@raw=[@generic={0x67, 0x0, 0x1, 0x7, 0x6c}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0xb, 0x3, 0xa, 0x10, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8cf}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x17, &(0x7f00000000c0)=""/23, 0x41100, 0x17, '\x00', r0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x0, 0x7, 0xfffffff9}, 0x10, 0x0, r1}, 0x78) r2 = socket(0xa, 0x3, 0x3) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:44 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @mcast1}, 0x1b) 06:33:44 executing program 0: r0 = socket(0x6, 0x3, 0x7) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x7, @remote, 0x8, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 06:33:44 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x10, 0x0, @dev, 0x6}, 0x20) 06:33:44 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:44 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:44 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004151}, 0x4) 06:33:44 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x1b) 06:33:44 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x300, 0x0, @dev, 0x6}, 0x20) 06:33:44 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x10, 0x0, @empty}, 0x20) 06:33:44 executing program 0: r0 = socket(0x18, 0x3, 0x1) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) 06:33:44 executing program 4: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x9c1ab103b52bf2b8, 0x1, 0x8, 0xffffffc0, {{0x1e, 0x4, 0x1, 0xc, 0x78, 0x66, 0x0, 0x5, 0x2f, 0x0, @local, @loopback, {[@timestamp={0x44, 0xc, 0xa6, 0x0, 0x5, [0x20, 0xffff]}, @end, @timestamp_prespec={0x44, 0x54, 0x82, 0x3, 0x4, [{@empty, 0x3}, {@multicast2, 0x3}, {@multicast1, 0x8}, {@broadcast, 0x1000}, {@multicast2, 0xfffffffb}, {@remote, 0x7}, {@multicast1, 0xd975}, {@multicast1, 0xfffffff8}, {@local, 0x80}, {@broadcast, 0x3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x4, 0x5, 0x1f, 0x1000, 0x10, @private2, @private1, 0x7, 0x40, 0x3, 0x7}}) r2 = socket(0xa, 0x3, 0x3) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1410, 0x300, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000991}, 0x10) 06:33:44 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x1b) 06:33:44 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xfc, 0x0, @empty}, 0x20) 06:33:44 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x500, 0x0, @dev, 0x6}, 0x20) 06:33:44 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1b) 06:33:44 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:44 executing program 0: socket(0xa, 0x3, 0x3) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x10) 06:33:44 executing program 4: r0 = socket(0x26, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xfffffffb}, 0x20) 06:33:44 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, '\x00', 0x0}}, 0x1b) 06:33:44 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x600, 0x0, @dev, 0x6}, 0x20) 06:33:44 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x80fe, 0x0, @empty}, 0x20) 06:33:44 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, '\x00', 0x2}}, 0x1b) 06:33:44 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x10) 06:33:44 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:44 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x700, 0x0, @dev, 0x6}, 0x20) 06:33:44 executing program 4: socket(0xa, 0x3, 0x3) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1412, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000085}, 0x11) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000514000227bd7000fedbdf1b000300000000000800080000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8021}, 0x44000) 06:33:44 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xc0fe, 0x0, @empty}, 0x20) 06:33:44 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, '\x00', 0x5}}, 0x1b) 06:33:45 executing program 0: r0 = socket(0x1d, 0x3, 0x6) connect$can_bcm(r0, &(0x7f0000000040)={0xa}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x7, 0x204, 0x2, {0x77359400}, {0x0, 0xea60}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x1f, 0x3, 0x0, 0x0, "051fc0686d642bd10039518dc5b9b2b8ae23cefc138cd71cbd9cc905626348ecfb4aad5a760cabd49cc2694b80a0261a4dd6de0695fd7f0f94fe0e607bb67f52"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20040084) 06:33:45 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x900, 0x0, @dev, 0x6}, 0x20) 06:33:45 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x17) 06:33:45 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xfc00, 0x0, @empty}, 0x20) 06:33:45 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:45 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x22000, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) [ 3016.298485] can: request_module (can-proto-6) failed. 06:33:45 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x2000001b) 06:33:45 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0xa00, 0x0, @dev, 0x6}, 0x20) 06:33:45 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xfe80, 0x0, @empty}, 0x20) [ 3016.363842] can: request_module (can-proto-6) failed. 06:33:45 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000180)) getsockname(r1, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000100)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x2710}, 0x10) 06:33:45 executing program 2: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:45 executing program 0: r0 = socket(0x1d, 0x4, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:45 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xfec0, 0x0, @empty}, 0x20) 06:33:45 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x3f00, 0x0, @dev, 0x6}, 0x20) 06:33:45 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0xae000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x1, 0x9}, {0x4, 0x1}, 0x80000000, 0x4, 0x8}) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) [ 3016.497796] can: request_module (can-proto-0) failed. 06:33:45 executing program 2: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:45 executing program 4: r0 = socket(0xa, 0x3, 0x3) recvmsg(r0, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/118, 0x76}], 0x9, &(0x7f0000001600)=""/4096, 0x1000}, 0x40000040) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000002680)={0x0, @pix_mp={0x7, 0x0, 0x33524742, 0x3, 0x8, [{0x3ff, 0x7fff}, {0x9, 0x9}, {0x6, 0x5}, {0x9, 0x7}, {0x2}, {0x0, 0xe45e}, {0x7fff, 0xffffff31}, {0x3f, 0xeb1}], 0x54, 0x3, 0x8, 0x1, 0x6}}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private0}, &(0x7f0000002640)=0x20) 06:33:45 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xff00, 0x0, @empty}, 0x20) 06:33:45 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @dev, 0x6}, 0x20) [ 3016.547474] can: request_module (can-proto-0) failed. 06:33:45 executing program 0: r0 = socket(0xa, 0x800, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:45 executing program 5: r0 = socket(0xa, 0x3, 0x5) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) bind$l2tp6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x86, @private0, 0x1}, 0x20) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/194, 0xc2}, {&(0x7f00000001c0)=""/13, 0xd}], 0x2, &(0x7f0000000240)=""/1, 0x1}, 0x20) 06:33:45 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:45 executing program 2: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x0}}, 0x20) 06:33:45 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x80fe, 0x0, @dev, 0x6}, 0x20) 06:33:45 executing program 4: r0 = socket(0xc369d7291346ff67, 0xa, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:45 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10, @empty}, 0x20) 06:33:45 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:45 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0xfe80, 0x0, @dev, 0x6}, 0x20) 06:33:45 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:45 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x1}) getsockname$l2tp6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x20) 06:33:45 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:45 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:46 executing program 5: r0 = socket(0x10, 0x6, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:46 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfc, @empty}, 0x20) 06:33:46 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004011}, 0x44) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:46 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev, 0x6}, 0x20) 06:33:46 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x40) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x40) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x1, &(0x7f0000000080)=@raw=[@exit], &(0x7f00000000c0)='syzkaller\x00', 0xfffffa79, 0x1a, &(0x7f0000000100)=""/26, 0x41000, 0x0, '\x00', r4, 0x18, r5, 0x8, &(0x7f0000000140)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0xc, 0x19, 0xfb}, 0x10}, 0x78) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r2}, 0x10) 06:33:46 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@none, 0x1}) getsockname$l2tp6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x20) 06:33:46 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80fe, @empty}, 0x20) 06:33:46 executing program 4: r0 = socket(0xa, 0x3, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000002080)={0x18, 0x0, r1, {0xf67}}, 0x18) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:46 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x0, 0x4}, 0x20) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x50) 06:33:46 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xc0fe, @empty}, 0x20) 06:33:46 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004011}, 0x44) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:46 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @dev, 0x6}, 0x20) 06:33:46 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r2, 0x2, 0x1, 0x0, 0x0, 0x40, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x10, 0xb, 0x8}}) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{@fixed}]}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x68, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7f}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xc4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040080}, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r3, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xd34}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x516}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x80000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040880}, 0x400c0) 06:33:46 executing program 5: r0 = socket(0xa, 0x3, 0x3) socket(0x15, 0x3, 0xfee) getpeername(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}, 0x806}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 06:33:46 executing program 4: ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:46 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfc00, @empty}, 0x20) 06:33:46 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @dev, 0x6}, 0x20) 06:33:46 executing program 0: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00000001c0)=""/220) r0 = socket(0xa, 0x3, 0x3) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1410, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000004c0)={0x1}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x101001) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000040)=0x7) 06:33:46 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004011}, 0x44) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:46 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffe, 0x10000000}, 0x20) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000040)={0x78, 0x0, 0x0, {0x0, 0x800, 0x0, {0x1, 0x4, 0x7, 0x7f, 0x0, 0x7, 0x4, 0x6, 0x9, 0x1000, 0x8001, 0xee00, 0x0, 0x79, 0x101}}}, 0x78) 06:33:46 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfe80, @empty}, 0x20) 06:33:46 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000040)=0x8c) 06:33:46 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5, @dev, 0x6}, 0x20) 06:33:46 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004011}, 0x44) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:46 executing program 0: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:46 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfffff85a, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x20) 06:33:46 executing program 4: r0 = socket(0x26, 0xa, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@any, 0x220}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_GETXATTR(r2, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x92}}, 0x18) write$FUSE_OPEN(r1, &(0x7f00000001c0)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x1e}}, 0x20) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000080)=""/198) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000200)=""/99) connect$l2tp6(r0, &(0x7f0000000300)={0xa, 0x0, 0x7fffffff, @private2, 0x9, 0x4}, 0x20) 06:33:46 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfec0, @empty}, 0x20) 06:33:46 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6, @dev, 0x6}, 0x20) 06:33:46 executing program 0: write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10}, 0x10) r0 = socket(0x23, 0x6, 0x10000) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:46 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:46 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) getsockname(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) 06:33:46 executing program 4: socket(0xa, 0x3, 0x3) 06:33:46 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xff00, @empty}, 0x20) 06:33:46 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @dev, 0x6}, 0x20) 06:33:46 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:47 executing program 4: r0 = socket(0xa, 0x3, 0x3) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:47 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) getsockname(r1, &(0x7f0000000080), &(0x7f0000000100)=0x80) 06:33:47 executing program 0: sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1405, 0x400, 0x70bd25, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x8400) r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:47 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @dev, 0x6}, 0x20) 06:33:47 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x100000, @empty}, 0x20) 06:33:47 executing program 2: r0 = socket(0xa, 0x3, 0x3) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:47 executing program 0: r0 = socket(0xa, 0x6, 0x4) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:47 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:47 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) getsockname$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x20) 06:33:47 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfc000000, @empty}, 0x20) 06:33:47 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x9, @dev, 0x6}, 0x20) 06:33:47 executing program 2: r0 = socket(0xa, 0x3, 0x3) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:47 executing program 5: r0 = socket(0xa, 0x3, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="130200000000000000000300000006001d00000000000c0010000000000000000000"], 0x28}}, 0x0) 06:33:47 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfe800000, @empty}, 0x20) 06:33:47 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x9bf, @mcast1}, 0x20) 06:33:47 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xa, @dev, 0x6}, 0x20) 06:33:47 executing program 2: r0 = socket(0xa, 0x3, 0x3) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:47 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10, @dev, 0x6}, 0x20) 06:33:47 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1ff, 0x495d, 0x8001, 0x400, 0x8, "6bd01ed513ceefe517b2e73f680e9b23efa99cbde6984cc8a9fc618da4a9d62cf0a206dc0095f4619ca72af386b4c95fd705a8bd6558e1ac541f43bc205aab6b51767d2d8e2ba8d4e4f4b6c9cc94a627ed5d250b1be40ffe01e4f33e75e4e0a944e0e1f7871dc5bf6000e7801cec670033be5b70945bcf30df39d4cb8584ffa3"}) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:47 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:47 executing program 5: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x7, @loopback, 0x0, 0x3}, 0x20) 06:33:47 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfec00000, @empty}, 0x20) 06:33:47 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) recvmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@x25={0x9, @remote}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/232, 0xe8}, 0x40000042) 06:33:47 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x300, @dev, 0x6}, 0x20) 06:33:47 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:47 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xff000000, @empty}, 0x20) 06:33:47 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x6, 0x2, 'client1\x00', 0xffffffff80000002, "0a91dbae8e287b42", "d95cbcdb378041bccd39b269b78ed1d353f392291bb5eb97b56d698c0b224fce", 0x7ff, 0x2}) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000040)=0x7a) r2 = socket(0xa, 0x3, 0x3) connect$can_bcm(r2, &(0x7f0000000000)={0xa}, 0x6e) 06:33:47 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) getpeername(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x2, 0x10000, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x30}}, 0x40005) 06:33:47 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname(r1, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80) 06:33:47 executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:47 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x500, @dev, 0x6}, 0x20) 06:33:47 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:47 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x0, 0x2, 0x9, 0x0, 0x7fffffffffffff68, 0x8}, @jmp={0x5, 0x1, 0xb, 0xa, 0x6, 0x2, 0xfffffffffffffffc}, @ldst={0x1, 0x3, 0x3, 0x1, 0x4, 0xfffffffffffffff0, 0x1}, @jmp={0x5, 0x1, 0x5, 0x3, 0x7, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='GPL\x00', 0x68d, 0xa4, &(0x7f0000000100)=""/164, 0x40f00, 0x2, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xe, 0x9, 0x9}, 0x10, 0xffffffffffffffff}, 0x78) 06:33:47 executing program 0: r0 = socket(0xa, 0x3, 0x3) accept4$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, {&(0x7f0000000040)=""/55, 0x37, &(0x7f0000000080)=""/134, 0x1, 0x1}}, 0x48) connect$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:47 executing program 5: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) write$FUSE_OPEN(r1, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='ip_v\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00100040000004010000eed24e1000380064000008049078ac14141264010101861d00000003060cf1ad4d2b5fa8a898b0b10104733601046afb0703e383077d0a010100"]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020, 0x0, 0x0}, 0x2020) r3 = getuid() write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0xffffffffffffffda, r2, {0x80000000, 0x1, 0x0, {0x5, 0x1ff, 0xfff, 0x3, 0x7ff, 0x3, 0x2, 0x10000, 0xfffffffd, 0x8000, 0x9, r3, 0xee01, 0x200, 0x1}}}, 0x78) 06:33:47 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x600, @dev, 0x6}, 0x20) 06:33:47 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:47 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x10}, 0x20) 06:33:47 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = socket(0x2a, 0x3, 0xffffffff) r2 = getpgid(0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x140c, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0xc}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x44811}, 0x20008040) getpgid(r2) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000001c0)=""/147, 0x93}], 0x2, &(0x7f00000002c0)=""/218, 0xda}, 0x40) 06:33:47 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000140)=0x2ed) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x800, 0xb49, {0x0, 0xea60}, {0x3, 0x1, 0xc4, 0x67, 0x6, 0x4, "170fbac0"}, 0x6, 0x3, @offset=0x1, 0x3ff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000000c0)={0x800, 0x2, {0x2, 0x1, 0x1, 0x1, 0x4}, 0x4}) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:47 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xfc}, 0x20) 06:33:47 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) 06:33:47 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x700, @dev, 0x6}, 0x20) 06:33:48 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:48 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x80fe}, 0x20) 06:33:48 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x900, @dev, 0x6}, 0x20) 06:33:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x1) socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0, 0x6}, 0x20) 06:33:48 executing program 0: r0 = socket(0x1, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) getpeername(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x80) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) 06:33:48 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000140)={0x54, 0x9d26, 0x0, 'queue0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc4) 06:33:48 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xc0fe}, 0x20) 06:33:48 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:48 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xa00, @dev, 0x6}, 0x20) 06:33:48 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf25030000000c001000040000000000000006001c003f00000008001900e000000206001d00000800001400080076657468305f746f5f68737200000000080019007f00000138a4b200e70dff0426b1d2ff5678f8ceaca84e75c7a24e58d1e4a1874d9f7e397771464ff4c69a71717643a5f35a60650d4ceeee060000002fbdb7037d1fe9a54497a3d0ca396430c99ce6568017919d65d645ea4bf8693cba004eb6b1681f9464d9035f9f16ea951e4a21a7c6e3c6f4bb983c1b12a495f7e1c28ff9414b9e4e2f2348c44e7c313fec3a4b419fdd7359e8e5bac7ffaf296878790b57502fdb4b75073e1cf3446ccf1a63fa768e98c79e6c51993a02d723576fd18cc40987a57627d4f9d4e4f8e4cc42096186c02385f2"], 0x54}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000640)={'vxcan1\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f0000000040)=0x2ba) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000240)=@sco, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f00000003c0)=""/60, 0x3c}, {&(0x7f0000000400)=""/207, 0xcf}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/4096, 0x1000}], 0x5, &(0x7f0000000680)=""/204, 0xcc}, 0x40) write$FUSE_OPEN(r3, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x9, 0x4801, 0x9, 0xff00, 0x5, 0x4}}, 0x50) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:48 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000200)) r0 = socket(0xa, 0x3, 0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{0x90, 0xfb}, 'port1\x00', 0x2, 0x10000, 0x6, 0x4, 0x40, 0xd7, 0x3f, 0x0, 0x3, 0x20}) socketpair(0x8, 0x6, 0x8000, &(0x7f0000000040)) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000280)={0x1, 0xb90, 0x1, 'queue1\x00', 0x9}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) 06:33:48 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000080)={0x26, 0x2, 0x4, 0x0, 0xb3, {0x0, 0xea60}, {0x4, 0x8, 0x6f, 0x4, 0x3, 0x9}, 0x6, 0x2, @fd=r1, 0x844, 0x0, r2}) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000040)=0x401) 06:33:48 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xfc00}, 0x20) 06:33:48 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:48 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3f00, @dev, 0x6}, 0x20) 06:33:48 executing program 0: r0 = socket(0x1a, 0x80000, 0x3) r1 = socket(0xb, 0x800, 0x7fffffff) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x78, 0x1412, 0x20, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x9b1}]}, 0x78}, 0x1, 0x0, 0x0, 0x44004}, 0x400c010) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f0000000040)=@ipx, &(0x7f00000000c0)=0x80) 06:33:48 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x100}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x41) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000300)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x4040000) 06:33:48 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xfe80}, 0x20) 06:33:48 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4000, @dev, 0x6}, 0x20) 06:33:48 executing program 4: r0 = socket(0xa, 0x3, 0x3) socketpair(0x2c, 0xa, 0x7, &(0x7f0000000580)) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0xd150cdea3bd0b119) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast1}, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x183c40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x44400) 06:33:48 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:48 executing program 0: r0 = socket(0x8, 0x4, 0xfffffffa) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) bind$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x81, @loopback, 0x7ff, 0x4}, 0x20) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) socket(0x28, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000011c0), 0x4000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x2000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000040)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000240)={0x46, 0x2, {0x3, 0x1, 0x4807d3a2, 0x0, 0xda}, 0x80000001}) socket(0x10, 0x800, 0x5) 06:33:48 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xfec0}, 0x20) 06:33:48 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe, @dev, 0x6}, 0x20) 06:33:48 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000040)=0x5) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r3}, 0x78) write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10, 0x0, r3}, 0x10) r4 = socket(0xa, 0x3, 0x3) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:48 executing program 4: r0 = socket(0x29, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:48 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xff00}, 0x20) 06:33:48 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000002c0)={{0x8, 0x8}, {0x2, 0x20}, 0x7, 0x0, 0x20}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000005000900000000000400cd8d4473b41a46c7020000000000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x8a, &(0x7f0000000100)=""/138, 0x40f00, 0x15, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x2, 0x74f, 0x5}, 0x10}, 0x78) r1 = socket(0xa, 0x3, 0x13) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x440040) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:48 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x40) connect$can_bcm(r2, &(0x7f0000000040)={0x1d, r4}, 0xfffffffffffffe9d) 06:33:48 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:48 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfe80, @dev, 0x6}, 0x20) 06:33:48 executing program 4: r0 = socket(0xa, 0x3, 0x3) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1404, 0x730cb45c205fdfe, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x24004140) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:48 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x100000}, 0x20) 06:33:48 executing program 5: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x24bb}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x800}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x800}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0xfd}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffff01}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}]}, 0x70}}, 0x4040844) r0 = socket(0xa, 0x3, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000040)={0x1, 0x2, {0x2, 0x3, 0x4, 0x3, 0xf7f9}}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:48 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x100000, @dev, 0x6}, 0x20) 06:33:48 executing program 0: sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r0 = socket(0xa, 0x3, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000009de0fa5d02cc52329ec5c6494c38bc0e42771b35c6b5c144f7e0644fae18a36ac0e1e97272f5edd8e4289bb07e863c1f401046ed1f38af3281ce4c", @ANYRES16=r2, @ANYBLOB="130200000000000000000300000006001d00000000000c0010000000000000000000"], 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5f}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x20008000) socketpair(0x3, 0x80007, 0x820, &(0x7f0000000040)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x400}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100000001}]}, 0x78}, 0x1, 0x0, 0x0, 0x845}, 0x40000) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:48 executing program 5: r0 = socket(0x29, 0x3, 0x3) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:48 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:48 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xfc000000}, 0x20) 06:33:48 executing program 4: r0 = socket(0x27, 0x6, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{@fixed}, {@none}, {@none}]}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000240)={@none, 0x9, 0x12e, 0x40, 0x2, 0x0, "b79999344a178178769da93c212a5f1c013059aad604b00184ac5acade113f7543581207c6ade244a69e75ad7d903a92407bfd5779b2978a11cc976789af0b250d84f7d86e0d35e3c766e1f17651e84fd0a0ea762882c4937ba0e08ea4d2b5884664ae4834b71b08cb7fb0518753b8e3cebdb46ade8663cbfc25aea012026bb2"}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:48 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) recvmsg(r0, &(0x7f0000002400)={&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000002280)=[{&(0x7f00000000c0)=""/188, 0xbc}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/27, 0x1b}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/81, 0x51}], 0x6, &(0x7f0000002300)=""/193, 0xc1}, 0x10000) r1 = socket(0xa, 0x3, 0x3) connect$can_bcm(r1, &(0x7f0000000000)={0xa}, 0x6e) 06:33:48 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1000000, @dev, 0x6}, 0x20) 06:33:48 executing program 4: r0 = socket(0xa, 0x80000, 0x14000006) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'sit0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x800) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x140c, 0x4, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_open_dev$cec(&(0x7f0000000080), 0x3, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000200)={r2, r0, 0x8000, 0xd7, &(0x7f0000000100)="0f9eff0d941e20d9d6f03c723ad7b4180a09bb2f5c6a8c47624832600548aef960e0175189c0a63cb681d14ed9dc4742baf9123305cc183fbe9e401dce9d51b768150c19e3190b68526d17e1f07dec0cb9918e8abb8a7208787330f376d90b8709bf8fd1f13e3848d01af01271206969ea2184efc0ca68dffc8a1e293df99f7155ede52415d838419d8760a4602dbd4444e8169ee49cad5489c651dc592cd497777f5b9db3743ca576591b55ef0595706d9ede6c60d5ae550ef7f4b06541901a0beda120db31369822b0724f699297815149ae3a467ee2", 0x2c, 0x6, 0x8e5b, 0x0, 0x0, 0x2, 0x7f, 'syz1\x00'}) 06:33:48 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xfe800000}, 0x20) 06:33:48 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xfffffffffffffd8b, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IP6_SADDR={0x0, 0x1f, @local}, @L2TP_ATTR_IP_DADDR={0x0, 0x19, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004005}, 0x4) 06:33:48 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:48 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2000000, @dev, 0x6}, 0x20) 06:33:49 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xfec00000}, 0x20) 06:33:49 executing program 5: r0 = socket(0xa, 0xa, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = fork() write$FUSE_LK(0xffffffffffffffff, &(0x7f0000002080)={0x28, 0x0, r1, {{0x9, 0xfffffffffffffff9, 0x1, r2}}}, 0x28) 06:33:49 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xa00, @dev, 0x6}, 0x20) 06:33:49 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3000000, @dev, 0x6}, 0x20) 06:33:49 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xa00, @dev, 0x6}, 0x20) 06:33:49 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x34, 0x262c, 0x33, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x7df0f52a, 0xfff}}) sendmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x6, 0x140, 0x7, {0x77359400}, {0x0, 0x2710}, {0x1, 0x0, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x0, 0x2, 0x0, 0x0, "ca212ef1285b50cc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 06:33:49 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xff000000}, 0x20) 06:33:49 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:49 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4000000, @dev, 0x6}, 0x20) 06:33:49 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xa00, @dev, 0x6}, 0x20) 06:33:49 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) getpeername$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x20) write$FUSE_OPEN(r1, 0x0, 0x0) getpeername$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f00000000c0)=0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x89, 0x1}, 0x20) 06:33:49 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:49 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:49 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5000000, @dev, 0x6}, 0x20) 06:33:49 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x0, 0xffffffff}, 0x20) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = socket(0x3, 0x5, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r2, r3, 0x1ff, 0xca, &(0x7f0000000180)="8fdbac8b87788ca508d9f50b0287e938027e39c9d3dd34bbca48f7e2c628461b8ff76e6ae6d7374e9caca7c8dd5fd4193a8303f202f95ec6739929e0e694b966c4743689ede939f5c3a64a4297ffb70824db77275d9a0b32cf965bd179a28abb61b71df8eaa824b587ef9d148d088d9bcd826a848639077465fe29d344a3e30ab17fdeee47920e41fdaf093805e8eb6ec407f1afac4d14b153ce25a3c20ba1107e5d75a1c9a30ee2ec9f0ffd08a206ff6567027ff15f156b309c0b98d8de537e1088e3c1971b75f05fd6", 0x7, 0x0, 0x1, 0x8000, 0xd65, 0x3, 0x4, 'syz1\x00'}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa) 06:33:49 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:49 executing program 0: socket(0xa, 0x3, 0x3) 06:33:49 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0x10}, 0x20) 06:33:49 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) getpeername$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000140)=0x20) write$FUSE_OPEN(r1, 0x0, 0x0) getpeername$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f00000000c0)=0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x89, 0x1}, 0x20) 06:33:50 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6000000, @dev, 0x6}, 0x20) 06:33:50 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r1}, 0x78) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002080)={0xa0, 0x0, r1, {{0x3, 0x3, 0x7ffffffffc, 0x8000, 0x7, 0xb, {0x2, 0x8001, 0x8, 0x3f, 0x3, 0x7, 0xfd, 0x4, 0x4d5, 0x8000, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2}}, {0x0, 0x4}}}, 0xa0) r2 = socket(0xa, 0x3, 0x3) connect$can_bcm(r2, &(0x7f0000000000)={0xa}, 0x6e) 06:33:50 executing program 5: r0 = socket(0xa, 0x3, 0x3) getpeername$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername(r1, &(0x7f00000000c0)=@tipc=@id, &(0x7f0000000140)=0x80) 06:33:50 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x500, @dev, 0x6}, 0x20) 06:33:50 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0xfc}, 0x20) 06:33:50 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8000, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:50 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7000000, @dev, 0x6}, 0x20) 06:33:50 executing program 0: r0 = socket(0xa, 0x6, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:50 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:50 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x500, @dev, 0x6}, 0x20) 06:33:50 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0x80fe}, 0x20) 06:33:50 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8810) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x1405, 0x100, 0x70bd29, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) r2 = socket(0xa, 0x3, 0x3) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x0, 0xfffffffc}, 0x20) 06:33:50 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x500, @dev, 0x6}, 0x20) 06:33:50 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000000, @dev, 0x6}, 0x20) 06:33:50 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:50 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0xffff7fff, 0x2, 0x4, 0x40, 0x5a7c, {r1, r2/1000+10000}, {0x5, 0x2, 0x7f, 0x9, 0x2c, 0x20, "8c11a5e3"}, 0x0, 0x1, @planes=&(0x7f0000000080)={0x3f, 0xfb5, @userptr=0x8, 0xf6}, 0x180}) 06:33:50 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0xc0fe}, 0x20) 06:33:50 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x9da, 0x20c00) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x1401, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x19751c41588f67d1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000000), 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000380)={0x9, 0x2, {0x2, 0x0, 0x2, 0x3, 0x80000001}, 0x6}) r3 = socket(0x29, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10}, 0x10}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)) socketpair(0x21, 0xa, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 06:33:50 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r1}, 0x78) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002080)={0xa0, 0x0, r1, {{0x3, 0x3, 0x7ffffffffc, 0x8000, 0x7, 0xb, {0x2, 0x8001, 0x8, 0x3f, 0x3, 0x7, 0xfd, 0x4, 0x4d5, 0x8000, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2}}, {0x0, 0x4}}}, 0xa0) r2 = socket(0xa, 0x3, 0x3) connect$can_bcm(r2, &(0x7f0000000000)={0xa}, 0x6e) 06:33:50 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) [ 3021.564013] ieee802154 phy0 wpan0: encryption failed: -22 [ 3021.569646] ieee802154 phy1 wpan1: encryption failed: -22 06:33:50 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x9000000, @dev, 0x6}, 0x20) 06:33:50 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:50 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0xfc00}, 0x20) 06:33:50 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x3, @raw_data="cdf9c00229ef415ab6889c63a46ef4cd1639b6c0d74b31608981d2c8b51f1b5d99f4e3c1adc6a308944b650c880cb9d897345ed2e9a42c106be36d2ade7555cb49fb4e1855ed2b870ee6075911fa84076a9c44f197ab94c925b8a258be578622e7672b6fbeaa6e474b80aea6495ef7c7c9089a211646d23deba6b61920f3ae01d8aed84c9aea5609286f562c5386f79a7707e2733c3469d8a929b640d4050ce9a6227ff51a3d666229b43bd22d1be39df7c67bf311003d2605710e5fbd88ae2956d9b358303cf3f8"}) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0xe92, 0x3, 0x4, 0x70111, 0x9, {0x77359400}, {0x4, 0x0, 0x3f, 0x1, 0x81, 0x1, "2114cc09"}, 0x8, 0x3, @fd=r1, 0x100}) read$FUSE(r1, &(0x7f0000000d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r3, {0x7fffffff}}, 0x18) r4 = socket(0xa, 0x3, 0x3) connect$can_bcm(r4, &(0x7f0000000000)={0xa}, 0x6e) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x20) 06:33:50 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:50 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40) r0 = socket(0xa, 0x3, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r1, &(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000600)=0x80) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044011}, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:50 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:50 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0xfe80}, 0x20) 06:33:50 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xa000000, @dev, 0x6}, 0x20) 06:33:50 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000e00400000300000000000000", @ANYRES64=r2, @ANYRES64=r3/1000+60000, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="6352d081c65f142dd76df8970400004001000000040000e001010000e8f2531fd611fc5a"], 0x48}, 0x1, 0x0, 0x0, 0x888}, 0x20000851) 06:33:50 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000000, @dev, 0x6}, 0x20) 06:33:50 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:50 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:50 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0xfec0}, 0x20) 06:33:50 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3f000000, @dev, 0x6}, 0x20) 06:33:50 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xe2b2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44040}, 0x20000014) 06:33:50 executing program 4: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:50 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:50 executing program 0: r0 = socket(0x26, 0x6, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000100)={"c5bd0a92cfb797789df4ba82864ffb3a6a6c31b24d52ac683e3aa3270f90", 0x7, 0x0, 0x0, 0x1020000, 0x9, 0x5, 0x6, 0x1, [0x6, 0x80000001, 0x4, 0x176b23, 0xffff, 0x9e, 0x400, 0x4, 0x1ff, 0xffc0000, 0x80000000, 0x3, 0x3, 0x3ff, 0xff, 0x80, 0xc86, 0x1, 0xe0]}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x213, 0x0, 0x4, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x40000) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20040040}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xab}, @L2TP_ATTR_DEBUG={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4081) getpeername(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000000)=0xe4) 06:33:50 executing program 4: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:50 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x40000000, @dev, 0x6}, 0x20) 06:33:50 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f00000000c0)) 06:33:50 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0xff00}, 0x20) 06:33:50 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:50 executing program 4: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:50 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1405, 0x20, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24080080) 06:33:50 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xf5ffffff, @dev, 0x6}, 0x20) 06:33:50 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) 06:33:51 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x80000000, @private1}, 0x20) r1 = socket(0xa, 0x3, 0x3) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20fcff00091404002fbd7000fbdbdf2508df0000000000000800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x40010) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) 06:33:51 executing program 4: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:51 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0x100000}, 0x20) 06:33:51 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0xfc000000}, 0x20) 06:33:51 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfe800000, @dev, 0x6}, 0x20) 06:33:51 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(r0, 0x0, &(0x7f00000000c0)) 06:33:51 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0xfe800000}, 0x20) 06:33:51 executing program 5: r0 = socket(0xa, 0x3, 0x3) socket(0x0, 0x80000, 0x8001) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:51 executing program 0: r0 = socket(0x5, 0x4, 0x7ffffffb) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:51 executing program 4: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:51 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5, @dev, 0x6}, 0x20) 06:33:51 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(r0, 0x0, 0x0) 06:33:51 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20) 06:33:51 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0xfec00000}, 0x20) 06:33:51 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:51 executing program 0: r0 = socket(0x26, 0x3, 0xc8e6) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:51 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0xff000000}, 0x20) 06:33:51 executing program 5: socketpair(0x1e, 0x800, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000740)={r0, r1, 0x6, 0xbd, &(0x7f0000000500)="d35a129c835d80d3d2e1eb2e6c243e2133bf033b0ac68dfb139259698f3b9093155627ea81f4b168e7e504b099acc841f554418c2e0681b89827c485604eb5fe65395455511d02071f851dcce3fe790f9cd88613f6f3ca51f1b30a3153dc01db4ef4392db1d78f2a559c0b41e460fd56dc60f9efbf2e241dce97edcc2adc2a48b505bbf983044786b01503cd6d278af7dfa7e275a670b66072a59b4d46b2353d0a3abd880a572ad188ee6e0de37d5dc37c2732db44a330bdec0af400f4", 0x0, 0x3, 0x8, 0x7fff, 0x400, 0x0, 0x6, 'syz1\x00'}) r2 = socket(0x1f, 0x4, 0x3) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) getsockname(r2, &(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000040)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x0, 0x7f, 0x0, 0x1000, 0x29, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x1, 0x8, 0x401, 0x6}}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x6000) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f00000000c0)) 06:33:51 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(r0, 0x0, 0x0) 06:33:51 executing program 4: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:51 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x17) 06:33:51 executing program 0: r0 = socket(0x22, 0x1, 0x3f) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1403, 0x300, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x506be70566726e) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000)={0xa}, 0x10) 06:33:51 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x6}, 0x20) 06:33:51 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) getsockname$l2tp6(r0, 0x0, 0x0) 06:33:51 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x20) 06:33:51 executing program 4: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:51 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:51 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x6}, 0x20) 06:33:51 executing program 0: ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000300)={0x2, 0x0, 0x6, 0x0, 0x12}) r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x604000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r2, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000140)=0x80) openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x12000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000001c0)=""/203) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10, 0xc00) 06:33:51 executing program 2: r0 = socket(0x5, 0x4, 0x7ffffffb) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:51 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, 0x6}, 0x20) 06:33:51 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:33:51 executing program 4: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:51 executing program 1: r0 = socket(0x9, 0xa74e96598ad3a307, 0x7) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r2, 0x40045109, &(0x7f0000000240)=0x5) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xd1) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000300)={0x8, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) 06:33:51 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0xfffffffffffffffe, 0x0, {{0x2b, 0x4}}}, 0x28) 06:33:51 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x5}, 0x6}, 0x20) 06:33:51 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:51 executing program 5: r0 = socket(0xa, 0x3, 0x3) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80080004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1405, 0x300, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x30}}, 0x15) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:51 executing program 4: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:51 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)={0x2, r1}) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:51 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:51 executing program 1: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:51 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x6}, 0x20) 06:33:51 executing program 5: r0 = socket(0xa, 0x3, 0x3) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r2}, 0x78) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0xffffffffffffffda, r2, {{0x4, 0xfffffffffffffff7, 0xffffffffffff221e, 0x2, 0x1, 0x10000, 0x0, 0x1}}}, 0x60) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) r4 = getuid() read$FUSE(r1, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90, 0x0, r2, {0x2, 0x1, 0x6, 0x7fff, 0x800, 0x6, {0x5, 0x9, 0x9, 0x7, 0xe33, 0x3, 0x0, 0x41c8, 0x10000, 0x6000, 0xfff, r4, r5, 0x4, 0x40}}}, 0x90) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x6, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:51 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x440780) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10}, 0x10) r1 = socket(0xa, 0x3, 0x3) connect$can_bcm(r1, &(0x7f0000000000)={0xa}, 0x6e) socket$nl_rdma(0x10, 0x3, 0x14) read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r4, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r5, r6, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r5, r6, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r6, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r5, r6, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r6, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r5, r6, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r7, r6, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r5, r6, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r5, r6, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r8, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r9, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r10, r11, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r10, r11, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r11, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r10, r11, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r11, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x6, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r10, r11, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r12, r11, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r10, r11, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r10, r11, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) r13 = getuid() read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r15 = getuid() r16 = getgid() r17 = getgid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000004140)={0x358, 0x0, r2, [{{0x1, 0x0, 0x4, 0x9e5, 0x95, 0x9, {0x1, 0x100000000, 0x1, 0x0, 0x8000, 0x6, 0xfffff317, 0x401, 0x3, 0x2000, 0x1f, r5, r11, 0x1, 0xbd78}}, {0x0, 0x1, 0x9, 0x0, ':+!:/(\\]%'}}, {{0x4, 0x0, 0x3, 0x8001, 0x7, 0x3, {0x6, 0x2, 0x4, 0x9, 0x7c90, 0x104d, 0x6, 0x9, 0x6, 0x6000, 0xffffffff, r13, r14, 0x40, 0x1ff}}, {0x4, 0x6, 0x10, 0x401, '/dev/input/mice\x00'}}, {{0x5, 0x0, 0x8001, 0x5, 0x7f, 0x2, {0x2, 0x24c784f0, 0x8, 0x8852, 0xc65, 0x1, 0xfff, 0xfffffffe, 0xec000000, 0x8000, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x8000}}, {0x1, 0x1fffe000000, 0x10, 0x2, '/dev/input/mice\x00'}}, {{0x3, 0x2, 0x100000000, 0x5, 0x3, 0x5, {0x6, 0x7, 0x3, 0x1ff, 0x8000, 0x100000001, 0x81, 0x6, 0xc684, 0x1000, 0x80000000, r15, r16, 0x10001, 0x7}}, {0x6, 0x8001, 0x10, 0xfffff5ac, '/dev/input/mice\x00'}}, {{0x3, 0x1, 0x0, 0x915, 0x9, 0x0, {0x3, 0xffffffffffffff81, 0x5, 0x2, 0x3, 0x2, 0x6, 0x861, 0xfffffffd, 0x6000, 0x80000001, 0x0, r17, 0x2, 0x2000}}, {0x1, 0x319f, 0x10, 0x20, '/dev/input/mice\x00'}}]}, 0x358) 06:33:52 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:52 executing program 4: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:52 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x7}, 0x6}, 0x20) 06:33:52 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) r1 = socket(0x1, 0x5, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0), 0x1, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x851) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8}, 0x0) openat$sequencer(0xffffffffffffff9c, 0xfffffffffffffffc, 0x80, 0x0) 06:33:52 executing program 5: r0 = socket(0x26, 0x4, 0x9) nanosleep(&(0x7f0000001280)={0x77359400}, &(0x7f00000012c0)) recvmsg$can_bcm(r0, &(0x7f0000001240)={&(0x7f0000000040)=@l2, 0x80, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000015c0)=""/104, 0x68}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/195, 0xc3}], 0x5, &(0x7f00000013c0)=""/156, 0x9c}, 0x10003) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:52 executing program 0: r0 = socket(0x2a, 0x6, 0x1000) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:52 executing program 2: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:52 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, 0x6}, 0x20) 06:33:52 executing program 1: r0 = socket(0x1d, 0x3, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:52 executing program 2: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:52 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x9}, 0x6}, 0x20) 06:33:52 executing program 4: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:52 executing program 2: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) [ 3023.423104] can: request_module (can-proto-3) failed. [ 3023.442958] can: request_module (can-proto-3) failed. 06:33:52 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r0, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r1}, 0x78) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r1, {0x7}}, 0x18) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000008340)=ANY=[@ANYBLOB="78060000daffffff", @ANYRES64=r3, @ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000100008000000100010000000000000009000000000000000100000000000000ffffff7f0000000006000000000000000100000000000000e2c2000000010000250000000080010020000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="ff0700008a3c0000000000000500000000000000f8ffffffffffffff00000000ff7f00000500000000000000030000000000000063e0000000000000080000000000000004000000fffeffff00000000000000000300000000000000010000000000000009000000000000000900000000000000828b0000000000000000008008000000050000000040000000000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="000000000700000000000000060000000000000005000000000000000a000000eb0000002f6465762f6375736500000000000000040000000000000003000000000000000200000000000000070000000000000004000000db33ffff05000000000000001f0000000000000008000000000000000000000000000000080000000000000009000000000000000001000003000000ff0300000040000004000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="8000000000040000000000000400d4eb64050000060000000000000007000000070000005c2f213f2c2d5200060000000000000001000000000000005e03000000000000090000000000000008000000940000000400000000000000550000000000000005000000000000000100000000000000008000000000000004000000000000000800000001000080010400000080000007000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="040000001800000000000000000000000000000004000000000000000b000000b80a00007b24213a2f2726ce2b2121000000000004000000000000000000000000000000e9090000000000000500000000000000ff0700000738000001000000000000000300000000000000008000000000000005000000000000001f00000000000000ff00000000000000ef210000ff7f0000ff7f000000c0000001000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="ffff000001040000000000000200000000000000cbe80000000000000a000000000100002f6465762f637573650000000000000002000000000000000000000000000000070000000000000001000000000000005c030000010000000000000000000000ff01000000000000c96f0000000000000500000000000000070000000000000000000000000000000104000000000000010001000030000007000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0600000006000000000000000000000000000000000400000000000010000000be0000002f6465762f696e7075742f6d696365000400000000000000030000000000000006000000000000000100000000000000080000000500000004000000000000000000000000000000994f0000000000003f000000000000000100000000000000530100000000000000000000001000000100ffff0040000003000000", @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="06000000ffffffff00000000030000000000000006000000000000000400000080ffffff2628292f000000000400000000000000020000000000000093668d1800000000e72a00000000000002000000000000020000000000000000d200000000000000030000000000000002000000000000000600000000000000f7ffffffffffffff060000000400000004000000006000007c0f0000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="00000000e1040000000000000300000000000000ef0000000000000010000000010000002f6465762f696e7075742f6d69636500050000000000000003000000000000007f000000000000004200000000000000ff7f000001040000040000000000000000020000000000000500000000000000750000000000000000000000000000007e0000000000000006000000ff0300000600000000c0000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b002000004000000000000000600000000000000ff0700000000000010000000030000002f6465762f696e7075742f6d69636500040000000000000002000000000000000100000000000000020000000000000006000000f9ffffff02000000000000000000000000000000ffffff7f0000000005000000000000000000000001000000ff000000000000003b08000001000000000001000000000001040000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="241d00000400000000000000020000000000000001000000000000000100000000010000a100000000000000"], 0x678) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000080)={0xa0, 0x0, r1, {{0x1, 0x1, 0xd2ae, 0x8, 0xc88, 0xc41a, {0x0, 0x40, 0x5, 0x2, 0x6, 0xf2, 0x81, 0x0, 0x1000, 0x2000, 0x1, 0xee00, r5, 0x7bd4, 0x4}}, {0x0, 0x18}}}, 0xa0) r7 = socket(0xa, 0x3, 0x3) bind$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:52 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200042) 06:33:52 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0x6}, 0x20) 06:33:52 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0x20, 0x7}, 'port0\x00', 0x10, 0x1c0000, 0x5, 0x200, 0x2, 0x4, 0x2, 0x0, 0x2, 0x6}) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:52 executing program 4: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:52 executing program 2: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:52 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}, 0x20) 06:33:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r2 = socket(0x21, 0x3, 0x3) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000300)={r2, r2, 0x7, 0xc7, &(0x7f0000000200)="c57ab23bdaaee6fb8bb7713ed5b218d16ba29901f2f07f9dd31e7d4a4d41516a9fe3c36a708cec60b263679e1e22466cf0ac3d2b76272c404d7d9285205833047384b972479c7ee23568d55d633e76223edbf9a49b208164b8cbd8da3f44c55542191507f5792dedfc673f38e6c96512518bc1009ef3faf2c7f16fa7f9232414f5be20c476d33b37e289da6f140f494e494f4375ea16c0d37cd1d86691e3fdcf28fe05a6a75145e7cfae5612e1e0ab6374f300528ec78475b67ef6528d63db8fec53f496c4b5ac", 0x6, 0x3f, 0x3f, 0x7, 0x167, 0x2, 0xa315, 'syz1\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f00000000c0)=""/95, 0x5f, &(0x7f0000000140)=""/25, 0x2, 0x3}}, 0x48) 06:33:52 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x1, 0xffe00000, 0x0, 0x0, 0x7}) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:53 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x20) 06:33:53 executing program 4: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:53 executing program 1: socket(0xa, 0x3, 0x3) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x20) 06:33:53 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000080)={r1, r2/1000+60000}, 0x10) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:33:53 executing program 0: r0 = socket(0xa, 0x3, 0x3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000001}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0xff}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:53 executing program 2: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:53 executing program 4: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:53 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x20) 06:33:53 executing program 0: socket(0xa, 0x3, 0x3) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1405, 0x100, 0x70bd29, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x44800) r1 = socket(0x1e, 0x80005, 0xc3) connect$vsock_stream(r1, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 06:33:53 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x3, 0x3}, 0x20) getsockname(r0, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000001640)={&(0x7f0000000340)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/17, 0x11}, {&(0x7f0000000500)=""/68, 0x44}, {&(0x7f0000000580)=""/35, 0x23}], 0x5, &(0x7f0000000640)=""/4096, 0x1000}, 0x0) recvmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/206, 0xce}, {&(0x7f0000000240)=""/5, 0x5}], 0x3}, 0x12140) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 06:33:53 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @mcast1}, 0x20) 06:33:53 executing program 4: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast2, 0x2}, 0x20) 06:33:53 executing program 2: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:53 executing program 0: r0 = socket(0xa, 0x3, 0x3) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1412, 0x10, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:53 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x20) 06:33:53 executing program 1: r0 = socket(0xa, 0x3, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000080)={0x9, 0x200, 0x0, 'queue0\x00', 0x7}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:53 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:53 executing program 2: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:53 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1406, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x20040080) r1 = socket(0xa, 0x3, 0x3) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000140)={{0xfe, 0x80}, {0x1c, 0xff}, 0x6, 0x5, 0x1f}) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) 06:33:53 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4001) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000080)=0x8000) 06:33:53 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x20) 06:33:53 executing program 1: r0 = socket(0x21, 0x2, 0x80000001) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:53 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:53 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:53 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x20) 06:33:53 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) getpeername$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x20) 06:33:53 executing program 2: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:53 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:33:53 executing program 1: r0 = socket(0xa, 0x3, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000200)={0x81, 0x3ff, 0x2}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socketpair(0xf, 0x3, 0xfffffffe, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250600000006001c00ffff000008000b000000000006001b004e20000005000d000100000005001200090000000800180064010102"], 0x44}}, 0x44004) 06:33:53 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xb}, 0x20) 06:33:53 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1412, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x805}, 0x4000004) 06:33:53 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x20) 06:33:53 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xc}, 0x20) 06:33:53 executing program 1: socket(0xa, 0x3, 0x3) 06:33:53 executing program 5: socket(0xa, 0x3, 0x3) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x20) 06:33:53 executing program 2: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:53 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x20) 06:33:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00', 0x0, 0x171434, 0x3, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000040)={0xaf3, 0x200, 0x0, 'queue1\x00', 0x40}) r1 = socket(0xa, 0x3, 0x3) connect$can_bcm(r1, &(0x7f0000000000)={0xa}, 0x6e) 06:33:53 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xd}, 0x20) 06:33:53 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname(r1, &(0x7f0000000140)=@xdp, &(0x7f00000001c0)=0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1403, 0x20, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'erspan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x2084) socket(0xa, 0x3, 0x3) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1000, @private0, 0x1f}, 0x20) 06:33:53 executing program 5: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x140, 0x0) getsockname(r1, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, &(0x7f00000000c0)=0x80) getsockname(r1, &(0x7f0000000240)=@isdn, &(0x7f00000002c0)=0x80) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, 0x1402, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x6}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4804) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3, @mcast1}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) 06:33:53 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000000c0)={0xdc, 0xff, 0xff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x8000, 0x50313459, 0x3, @discrete={0xb0, 0x1}}) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) r2 = socket(0xa, 0x3, 0x3) connect$can_bcm(r2, &(0x7f0000000000)={0xa}, 0x6e) 06:33:53 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x20) 06:33:53 executing program 2: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:54 executing program 5: r0 = socket(0x4, 0x6, 0x3) socket(0x3, 0x6, 0x4) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x13, 0xfffffffc}, 0x20) 06:33:54 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xf}, 0x20) 06:33:54 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x20) 06:33:54 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)=@generic, 0x80, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/194, 0xc2}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)}, {&(0x7f0000001200)=""/190, 0xbe}], 0x4, &(0x7f0000001300)=""/123, 0x7b}, 0x10000) 06:33:54 executing program 1: r0 = socket(0x2, 0xa, 0x203) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1401, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x42}]}, 0x4}, 0x1, 0x0, 0x0, 0x14000084}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x1405, 0x2, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x44000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xff70, 0x2, 0x4, 0x10, 0x2, {r3, r4/1000+60000}, {0x3, 0xc, 0x4, 0x2, 0x40, 0x6, "6c7dd7d8"}, 0x1000, 0x1, @fd, 0x7f}) 06:33:54 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x10}, 0x20) 06:33:54 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname(r1, &(0x7f0000000140)=@xdp, &(0x7f00000001c0)=0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1403, 0x20, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'erspan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x2084) socket(0xa, 0x3, 0x3) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1000, @private0, 0x1f}, 0x20) 06:33:54 executing program 5: r0 = socket(0xa, 0x3, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0xffffffffffffffea) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}, 0xfcb6) 06:33:54 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) getsockname(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000000c0)=0x80) 06:33:54 executing program 2: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:54 executing program 1: socket(0xa, 0x3, 0x3) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x568bb952, 0x4003}, 0x20) 06:33:54 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x11}, 0x20) 06:33:54 executing program 4: r0 = socket(0x2, 0xa, 0x203) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1401, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x42}]}, 0x4}, 0x1, 0x0, 0x0, 0x14000084}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x1405, 0x2, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x44000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xff70, 0x2, 0x4, 0x10, 0x2, {r3, r4/1000+60000}, {0x3, 0xc, 0x4, 0x2, 0x40, 0x6, "6c7dd7d8"}, 0x1000, 0x1, @fd, 0x7f}) 06:33:54 executing program 5: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000040)) 06:33:54 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) getsockname(r1, &(0x7f0000000040)=@in={0x2, 0x0, @local}, &(0x7f00000000c0)=0x80) 06:33:54 executing program 1: r0 = socket(0xa, 0x3, 0x3) recvmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@in6, 0x80, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/116, 0x74}, {&(0x7f0000002180)=""/157, 0x9d}, {&(0x7f0000002240)=""/85, 0x55}, {&(0x7f00000022c0)=""/79, 0x4f}], 0x6, &(0x7f00000023c0)=""/230, 0xe6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:54 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x12}, 0x20) 06:33:54 executing program 4: r0 = socket(0x2, 0xa, 0x203) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1401, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x42}]}, 0x4}, 0x1, 0x0, 0x0, 0x14000084}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x1405, 0x2, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x44000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xff70, 0x2, 0x4, 0x10, 0x2, {r3, r4/1000+60000}, {0x3, 0xc, 0x4, 0x2, 0x40, 0x6, "6c7dd7d8"}, 0x1000, 0x1, @fd, 0x7f}) 06:33:54 executing program 2: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:54 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x10000, 0x2, 0x4, 0x800, 0x8, {0x0, 0xea60}, {0x5, 0x0, 0x9, 0x1, 0x6, 0x41, "5d4434ad"}, 0x3, 0x4, @userptr=0x3, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)={0x3f, 0x9, 0x4, 0x70000, 0x6, {0x77359400}, {0x2, 0x8, 0x5, 0x5, 0x20, 0x5, "1ebf2e28"}, 0x7, 0x1, @planes=&(0x7f0000000040)={0xfffffffd, 0x3000, @mem_offset=0x7, 0x8}, 0x3, 0x0, r2}) 06:33:54 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x14}, 0x20) 06:33:54 executing program 0: socket(0x25, 0x3, 0x3) 06:33:54 executing program 4: r0 = socket(0x2, 0xa, 0x203) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1401, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x42}]}, 0x4}, 0x1, 0x0, 0x0, 0x14000084}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x1405, 0x2, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x44000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xff70, 0x2, 0x4, 0x10, 0x2, {r3, r4/1000+60000}, {0x3, 0xc, 0x4, 0x2, 0x40, 0x6, "6c7dd7d8"}, 0x1000, 0x1, @fd, 0x7f}) 06:33:54 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r3, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3ff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) 06:33:54 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x17}, 0x20) 06:33:54 executing program 2: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:54 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={{0xfe}, {0x0, 0xff}, 0x7, 0x2, 0x3}) r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) 06:33:55 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x26c, 0x0, 0x4, 0xe000, 0x4, {0x77359400}, {0x2, 0xc, 0x40, 0x2, 0xdb, 0xff, 'q[yd'}, 0x5, 0x2, @planes=&(0x7f0000000000)={0x5, 0x3, @userptr=0x8, 0x9}, 0x3, 0x0, r0}) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:55 executing program 4: r0 = socket(0x2, 0xa, 0x203) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1401, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x42}]}, 0x4}, 0x1, 0x0, 0x0, 0x14000084}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x1405, 0x2, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x44000) clock_gettime(0x0, &(0x7f0000000000)) 06:33:55 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x18}, 0x20) 06:33:55 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast1}, 0x20) 06:33:55 executing program 0: ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000040)=0x14) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000080)) r1 = socket(0xa, 0x4, 0x3) connect$can_bcm(r1, &(0x7f0000000000)={0xa}, 0x6e) 06:33:55 executing program 2: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:55 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x19}, 0x20) 06:33:55 executing program 2: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20000060) 06:33:55 executing program 4: r0 = socket(0x2, 0xa, 0x203) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1401, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x42}]}, 0x4}, 0x1, 0x0, 0x0, 0x14000084}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x1405, 0x2, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x44000) 06:33:55 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x20) 06:33:55 executing program 1: r0 = socket(0xa, 0x3, 0x3) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x642387a3, 0x48000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000002c0)={0x0}) getsockname$l2tp6(r0, &(0x7f0000000000), &(0x7f0000000440)=0x20) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="20100000121400089f3cc98ceb6bc1a63b391fc93a0528bd7000fb38f3628cf26e3fc0448a87816004f2e9dbdf2508004f"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4048051) r3 = syz_open_dev$dri(&(0x7f0000000380), 0x3, 0x14b440) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000003c0)={r2, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000400)={r4}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000) write$FUSE_GETXATTR(r5, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0x0, {0x620}}, 0x18) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) getpeername(r0, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000140)=0x80) socket$nl_rdma(0x10, 0x3, 0x14) 06:33:55 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1b}, 0x20) 06:33:55 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:33:55 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000080)={0xa738d27a, 0x7f, 0x1, 'queue0\x00', 0x200}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000000214000226bd7000fedbdf250800010400000000080001000200000008004400b8ee4495bd883283c9ca347459c0ffc9f20cbb6054aa045cf39751890e6c505bfcd6793e3393e388ce42a8db59b3c4236f9ac692044b6ed87477232dd865091110f9fee6d8958aa6568c6a69a1bb2cb82dbf922fc8eb770e1b4fb45d58660bcf8ccd252989f7815cfb418111f7f228c62e106602496b7dfa64ddd10bbacad46a277d48f44b96460fb103d4dcdc20dc00a75722976aebb6fa6b213d16f002841e4e", @ANYRES32=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000180)) syz_open_dev$dri(&(0x7f0000000200), 0x3, 0x12000) 06:33:55 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/162, 0xa2}], 0x1, &(0x7f00000001c0)=""/86, 0x56}, 0x0) 06:33:55 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1d}, 0x20) 06:33:55 executing program 4: r0 = socket(0x2, 0xa, 0x203) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1401, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x42}]}, 0x4}, 0x1, 0x0, 0x0, 0x14000084}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) socket$nl_rdma(0x10, 0x3, 0x14) 06:33:55 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socketpair(0x1f, 0x1, 0xfffffffa, &(0x7f00000005c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xa0b2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000004) 06:33:55 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) socket$can_bcm(0x1d, 0x2, 0x2) 06:33:55 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:33:55 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x21}, 0x20) 06:33:55 executing program 4: r0 = socket(0x2, 0xa, 0x203) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1401, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x42}]}, 0x4}, 0x1, 0x0, 0x0, 0x14000084}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:55 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) getpeername$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) recvmsg(r0, &(0x7f00000002c0)={&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1}, 0x7b6240997a73b8bb) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000100)={0x3, 0x1, {0x0, 0x0, 0x0, 0x0, 0x800}, 0x7}) write$FUSE_OPEN(r1, 0x0, 0x0) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffc0, 0x2}, 0x20) 06:33:55 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbc925070004000c000f000400000200000000060001000b0000005ce7cd5b0902f451"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008845) 06:33:55 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:33:55 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xace, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x20) 06:33:55 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000200)={0xfc6, 0x4, 0x0, 'queue0\x00', 0x4}) getpeername(r0, &(0x7f0000000140)=@vsock, &(0x7f00000001c0)=0x80) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x0, &(0x7f0000000200)}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000000c0)=0x80) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}) 06:33:55 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x23}, 0x20) 06:33:55 executing program 4: r0 = socket(0x2, 0xa, 0x203) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1401, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x42}]}, 0x4}, 0x1, 0x0, 0x0, 0x14000084}, 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:55 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020) r1 = socket(0xa, 0x3, 0x3) recvmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/174, 0xae}, {&(0x7f0000000100)=""/18, 0x12}], 0x2, &(0x7f0000000180)=""/4096, 0x1000}, 0x40000000) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:55 executing program 2: ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={{0xfe}, {0x0, 0xff}, 0x7, 0x2, 0x3}) r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) 06:33:55 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x25}, 0x20) 06:33:55 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0xffffffff, 0x4, 0x1, 0x8000}}, 0x20) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d04, &(0x7f0000000040)=0x1c) 06:33:55 executing program 4: r0 = socket(0x2, 0xa, 0x203) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:55 executing program 1: r0 = socket(0x26, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:56 executing program 2: r0 = socket(0x2, 0xa, 0x203) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x1401, 0x300, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x42}]}, 0x4}, 0x1, 0x0, 0x0, 0x14000084}, 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:56 executing program 4: r0 = socket(0x2, 0xa, 0x203) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:56 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x27}, 0x20) 06:33:56 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000200)={0xfc6, 0x4, 0x0, 'queue0\x00', 0x4}) getpeername(r0, &(0x7f0000000140)=@vsock, &(0x7f00000001c0)=0x80) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x0, &(0x7f0000000200)}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000000c0)=0x80) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000100)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}) 06:33:56 executing program 1: r0 = socket(0x1e, 0x5, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) socket(0x6, 0x1, 0x15) 06:33:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000002180)={0xffffffffffffffff, r0, 0x200, 0x9a, &(0x7f00000020c0)="1fd0659864494883374963c9f258414b230a409bc2ecd6e37270ab8351d9d30c94e50d670bd6e718727154acdda31d2e5703b5c31781b1d4c3dcb8c2ef5ca20258ff80c71cdd2a202576060fafad9db376ced8ba50439118748c6aa6dc1831e25970198082944e30af37152df4414a7b9cb5e8e52c3ec29b4bb5003cd7dd3c76b9444145af67cdc04cf09cf285b82fb6f10e685e6a3c49a04735", 0xff, 0x7, 0x7, 0x0, 0x4, 0x2, 0x8, 'syz1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000002080)={0x18, 0x0, r1, {0xbc}}, 0x18) r2 = socket(0x8, 0x5, 0x3) connect$can_bcm(r2, &(0x7f0000000000)={0xa}, 0x6e) 06:33:56 executing program 5: r0 = socket(0xa, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="950000000000000018160000", @ANYRES32=0x1, @ANYBLOB="000000000000000018328c4dfa149fa97a00000400000000000000000000003b4b0000100000004d1002001000000095000000000000008433ffff01", @ANYRES32, @ANYBLOB="00000000d6e80000850000009f000000"], &(0x7f00000000c0)='GPL\x00', 0xfffffffd, 0x17, &(0x7f0000000100)=""/23, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x1, 0x80f33}, 0x10}, 0x78) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:56 executing program 4: r0 = socket(0x2, 0xa, 0x203) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:56 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x4824c1) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x3}) 06:33:56 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x28}, 0x20) 06:33:56 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x40) connect$can_bcm(r0, &(0x7f0000000040)={0xa, r2}, 0x10) 06:33:56 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0xffffffff, 0x4, 0x1, 0x8000}}, 0x20) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d04, &(0x7f0000000040)=0x1c) 06:33:56 executing program 1: r0 = socket(0xa, 0x3, 0x3) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000000)=0x4) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:56 executing program 0: r0 = socket(0x15, 0x1, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) recvmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/150, 0x96}, {&(0x7f0000000100)=""/198, 0xc6}, {&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/244, 0xf4}, {&(0x7f00000003c0)=""/185, 0xb9}], 0x6, &(0x7f0000000540)=""/236, 0xec}, 0x40000000) 06:33:56 executing program 4: getpeername(0xffffffffffffffff, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:56 executing program 1: r0 = socket(0x3, 0x6, 0x23) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:57 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0xffffffff, 0x4, 0x1, 0x8000}}, 0x20) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d04, &(0x7f0000000040)=0x1c) 06:33:57 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x29}, 0x20) 06:33:57 executing program 5: r0 = socket(0xa, 0x3, 0x3) socketpair(0x26, 0x1332c1cdada9bbdf, 0x1f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x140b, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x50}}, 0x24000080) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:57 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) r1 = socket(0xa, 0x3, 0x3) connect$can_bcm(r1, &(0x7f0000000000)={0xa}, 0x10) 06:33:57 executing program 4: getpeername(0xffffffffffffffff, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:57 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0xffffffff, 0x4, 0x1, 0x8000}}, 0x20) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d04, &(0x7f0000000040)=0x1c) 06:33:57 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1, 0x1, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x38, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @private=0xa010100]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', r0, 0x7800, 0x1, 0x2, 0x80000001, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@ssrr={0x89, 0x27, 0x94, [@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)={0x401, 0x3, 0x7, 0xca9a, 0x9, 0x5}) 06:33:57 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2a}, 0x20) 06:33:57 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getpeername(r1, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000100)={0x0, 0x494e4f4b, 0x1, @stepwise={0xffffffca, 0x0, 0x80000000, 0x0, 0x1000, 0x8000}}) 06:33:57 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000040)) r1 = socket(0xa, 0x3, 0x3) connect$can_bcm(r1, &(0x7f0000000000)={0xa}, 0x6e) 06:33:57 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0xffffffff, 0x4, 0x1, 0x8000}}, 0x20) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:57 executing program 4: getpeername(0xffffffffffffffff, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:57 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2b}, 0x20) 06:33:57 executing program 0: r0 = socket(0xa, 0x3, 0x3) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10}, 0x10) socket(0x2c, 0xa, 0x8) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:57 executing program 1: r0 = socket(0xa, 0x3, 0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x8, @empty, 0x2, 0x4}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @local, 0x3, 0x1}, 0x20) 06:33:57 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:57 executing program 5: r0 = socket(0xa, 0x3, 0x3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20008000) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:57 executing program 4: r0 = socket(0x0, 0xa, 0x203) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:57 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:57 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2d}, 0x20) 06:33:57 executing program 5: r0 = socket(0x1, 0x1, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1406, 0x1e, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048004}, 0x1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x1401, 0x100, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004005}, 0x800) 06:33:57 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2f}, 0x20) 06:33:57 executing program 4: r0 = socket(0x0, 0xa, 0x203) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:57 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:57 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000)) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1ff) 06:33:57 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x800c020}, 0x4004000) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:57 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x30}, 0x20) 06:33:57 executing program 4: r0 = socket(0x0, 0xa, 0x203) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:57 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:57 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x20}, @jmp={0x5, 0x1, 0x5, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x5, 0x3, 0x9, 0x18, 0x10}, @func, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x1ff, 0x28, &(0x7f00000000c0)=""/40, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xb, 0xe9c97116, 0x3}, 0x10}, 0x78) syz_open_dev$vim2m(&(0x7f0000000300), 0xa90e, 0x2) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002f00), 0x884000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xffffbdbb7b7802ad, 0x5, &(0x7f0000000340)=@raw=[@map={0x18, 0x3, 0x1, 0x0, r2}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xdb, &(0x7f00000003c0)=""/219, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x9, 0x3, 0xffffffff}, 0x10, 0xffffffffffffffff, r1}, 0x78) recvmsg$can_bcm(r2, &(0x7f0000003400)={&(0x7f0000002f40)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003340)=[{&(0x7f0000002fc0)=""/219, 0xdb}, {&(0x7f00000030c0)=""/153, 0x99}, {&(0x7f0000003180)=""/233, 0xe9}, {&(0x7f0000003280)=""/104, 0x68}, {&(0x7f0000003300)=""/27, 0x1b}], 0x5, &(0x7f00000033c0)=""/62, 0x3e}, 0x100) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x7f, 0xb3, 0xf7, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x10, 0x40, 0xe564}}) socket$l2tp6(0xa, 0x2, 0x73) clock_getres(0x5, &(0x7f0000000200)) 06:33:57 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x9, &(0x7f0000000080)=@raw=[@exit, @jmp={0x5, 0x0, 0x2, 0xa, 0x9, 0xfffffffffffffffe, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc723, 0x0, 0x0, 0x0, 0x9}, @map={0x18, 0xb, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x3a}, @generic={0x5, 0x8, 0x3, 0x0, 0x8}], &(0x7f0000000100)='syzkaller\x00', 0x67, 0xfe, &(0x7f0000000140)=""/254, 0x41000, 0x10, '\x00', r2, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x7, 0x5, 0x9}, 0x10}, 0x78) 06:33:57 executing program 5: ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000140)=0x1) r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x0, @vbi={0x10000, 0x5ee3, 0x4, 0x51424752, [0x3, 0x5d], [0x2, 0x3f], 0x2}}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/85, 0x55}, 0x1) 06:33:57 executing program 2: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:57 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x31}, 0x20) 06:33:57 executing program 4: r0 = socket(0x2, 0x0, 0x203) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:57 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x140b, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}}, 0x4004010) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140b, 0x100, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x24048041) 06:33:57 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x32}, 0x20) 06:33:57 executing program 2: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:57 executing program 4: r0 = socket(0x2, 0x0, 0x203) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:57 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x10001, 0x34343459, 0x3, @stepwise={0x80000000, 0x200, 0x4000, 0x4b2963f, 0x40, 0x1}}) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) 06:33:57 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1402, 0x800, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 06:33:57 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x33}, 0x20) 06:33:57 executing program 4: r0 = socket(0x2, 0x0, 0x203) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:57 executing program 2: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:57 executing program 1: r0 = socket(0xf, 0x3, 0x10000203) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:57 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:57 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x34}, 0x20) 06:33:57 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r2, r0, 0x111, 0x52, &(0x7f0000000040)="06226ee66bab64f7534f98793f19aa9f4a0711eddfd94810cae4e9c0084ab85e930db6e28ffb9b6e852e2c3d856acde0536e52cd4372564e1976fbffd3d3c2b4329afc95ba978237c927eab8a9a39bdd8ee6", 0x0, 0x7, 0x3937, 0x9, 0x2, 0x3, 0x4, 'syz0\x00'}) 06:33:57 executing program 4: r0 = socket(0x2, 0xa, 0x0) getpeername(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:57 executing program 1: r0 = socket(0xa, 0x3, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x140c, 0x4, 0x70bd25, 0x259fdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x2400c010) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000180)) 06:33:57 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:58 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x35}, 0x20) 06:33:58 executing program 5: r0 = socket(0xa, 0x3, 0x3) r1 = fork() write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0xc4ad3a92b491cd3b, 0x0, {{0x1ff, 0x80000000, 0x2, r1}}}, 0x28) clock_getres(0x4, &(0x7f0000000040)) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000080)) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 06:33:58 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1404, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8090}, 0x4004) 06:33:58 executing program 4: socket(0x2, 0xa, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:58 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x4, @empty, 0x0, 0x2}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r5, &(0x7f0000000240)=@alg, &(0x7f00000002c0)=0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r6, 0x0, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x10000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r8, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), r8) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r4) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x80}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dummy0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40804) sendmsg$L2TP_CMD_NOOP(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYRESDEC=r0, @ANYRES32=r4, @ANYBLOB="08001800e0000002e872f16424f94e1bb9db9438b3eff262f72b1602ef2c2b10f082ed130c2510ab43c5b062902fce9e1ba522f7098f4518f99aafd8c94e0fc63fd09f7980277101262267ad20c2084d53fa26c3ac59a3c190a38670559706d949c02e445313757cba32fb66148e6516a0dd37094b90c032354fc8a1bf4d335ee3be375762529709107c34", @ANYRES32=r3, @ANYRESDEC=r6], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x811) 06:33:58 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:58 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x36}, 0x20) 06:33:58 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = socket(0x8, 0x4, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000052c0)={'syztnl1\x00', &(0x7f0000005240)={'ip6gre0\x00', 0x0, 0x0, 0x1, 0x9, 0xc7e, 0x21, @mcast1, @loopback, 0x40, 0x700, 0x11, 0x9}}) sendmsg$can_bcm(r1, &(0x7f0000005400)={&(0x7f0000005300)={0x1d, r2}, 0x10, &(0x7f00000053c0)={&(0x7f0000005340)={0x5, 0x209, 0x200, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x1, 0x1}, 0x1d, 0x2, 0x0, 0x0, "defcf7bdebbd129aa8497149fce93749432c5f334953e065f979aa45439c97beacbb73e8deaf4106eb16f74127fb1a825fa95a88051f6244fdb061ee1302e90a"}}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x20048800) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000000314047613bd7000ffdbdf650900020073797a300000a105000000000000650014003300776c616e0e00"/56], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040000) 06:33:58 executing program 4: socket(0x2, 0xa, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:58 executing program 5: r0 = socket(0xa, 0x3, 0x2) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @remote, 0x7, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x227}, @alu={0x4, 0x0, 0xa, 0x3, 0x3, 0x6, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x2b, 0xf0, &(0x7f0000000100)=""/240, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x4, 0x6c}, 0x10, 0x107fa}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) 06:33:58 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x37}, 0x20) 06:33:58 executing program 4: socket(0x2, 0xa, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@vsock, &(0x7f0000000040)=0x91) 06:33:58 executing program 2: r0 = socket(0x0, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:58 executing program 1: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000080)={@none, 0x0, 0x0, 0x19, 0x401, 0x3, "8f42187305072ef93699807daab75f46ba845e5ce4489e4f9a178fbe521abe34c60167f2a2e3ff08325aa250bda7e45dc343420e38f5c3e37d794ddafde158c495777ff3a437a7b651dd38a723c99ce3a0281dc3f3ccdf1a1b9b89cb03455fbff32e3ee3aa1eeb2fa1475a23fddec342b77e2315c7db577703a2933e341759bb"}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000000), 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r2, 0xc2, 0x5, &(0x7f0000000000)="34777650f5", 0x40, 0x9, 0x1, 0x1f, 0x2, 0x3, 0x2, 'syz0\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:58 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0xd8a, 0x2, 0x0, 'queue0\x00', 0x5}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={r1}) r2 = socket(0xa, 0x3, 0x3) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000180)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) write$6lowpan_enable(r3, &(0x7f0000000280)='1', 0x1) 06:33:58 executing program 0: r0 = socket(0xa, 0x3, 0x3) socket(0x18, 0x2, 0x81) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000100)) write$FUSE_OPEN(r1, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x800}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getpeername(r0, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000000)=0x80) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x0, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, 0x700, 0x700, 0x3d, 0x1c5}}) connect$can_bcm(r2, &(0x7f0000000040)={0xa, r3}, 0x10) 06:33:58 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3a}, 0x20) 06:33:58 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:58 executing program 4: r0 = socket(0x2, 0xa, 0x0) getpeername(r0, 0x0, &(0x7f0000000040)) 06:33:58 executing program 1: r0 = socket(0x29, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:58 executing program 5: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:58 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3b}, 0x20) 06:33:58 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0x5452, &(0x7f00000001c0)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) socket(0x28, 0x2, 0x8000) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:58 executing program 1: r0 = socket(0xa, 0x3, 0x3) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x7, 0x0, 0x9, {}, {0x77359400}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "bbad1a10dd83a9f8"}}, 0x48}, 0x1, 0x0, 0x0, 0x40d0}, 0x8001) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:58 executing program 4: r0 = socket(0x2, 0xa, 0x0) getpeername(r0, 0x0, 0x0) 06:33:58 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:58 executing program 0: openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000040)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000080)={0x9, 0x2, {0x1, 0x3, 0xee, 0x1, 0x1}, 0xba}) r1 = socket(0xa, 0x3, 0x3) connect$can_bcm(r1, &(0x7f0000000000)={0xa}, 0x6e) 06:33:58 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3c}, 0x20) 06:33:58 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) 06:33:58 executing program 4: r0 = socket(0xa, 0x3, 0x2) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @remote, 0x7, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x227}, @alu={0x4, 0x0, 0xa, 0x3, 0x3, 0x6, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x2b, 0xf0, &(0x7f0000000100)=""/240, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x4, 0x6c}, 0x10, 0x107fa}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) 06:33:58 executing program 5: r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000100)=0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'gretap0\x00', r2, 0x10, 0x40, 0x0, 0x5368, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x68, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@rr={0x7, 0x23, 0xd6, [@multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010101]}, @lsrr={0x83, 0x13, 0x3a, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xc}]}, @generic={0x7, 0x2}, @generic={0x82, 0x7, "9c43cf4143"}, @generic={0x7, 0x7, "89b06aa5f8"}, @noop]}}}}}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:58 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x140b, 0x400, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x1) 06:33:58 executing program 1: r0 = socket(0xa, 0x3, 0x3) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010100}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) 06:33:58 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3d}, 0x20) 06:33:58 executing program 2: r0 = socket(0xa, 0x0, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:58 executing program 4: r0 = socket(0xa, 0x3, 0x2) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @remote, 0x7, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x227}, @alu={0x4, 0x0, 0xa, 0x3, 0x3, 0x6, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x2b, 0xf0, &(0x7f0000000100)=""/240, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x4, 0x6c}, 0x10, 0x107fa}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) 06:33:58 executing program 0: r0 = socket(0xa, 0x3, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:58 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:33:58 executing program 5: r0 = socket(0xa, 0x3, 0x3) socket$l2tp(0x2, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x41, @mcast1}, 0x20) 06:33:58 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @remote}}}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1410, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8006}, 0x4000000) 06:33:58 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:58 executing program 4: r0 = socket(0xa, 0x3, 0x2) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @remote, 0x7, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x227}, @alu={0x4, 0x0, 0xa, 0x3, 0x3, 0x6, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x2b, 0xf0, &(0x7f0000000100)=""/240, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x4, 0x6c}, 0x10, 0x107fa}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) 06:33:58 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:33:58 executing program 0: r0 = socket(0x26, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:58 executing program 5: r0 = socket(0xa, 0x3, 0x2) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) write$sndseq(r3, &(0x7f0000000040)=[{0xe0, 0x6, 0x7, 0x81, @time={0x6, 0x3}, {0x81, 0x7f}, {0x8, 0xc5}, @raw32={[0x9, 0x9, 0x4]}}, {0x9, 0x0, 0x2, 0xde, @tick=0x4, {0x1}, {0x81, 0x98}, @ext={0x1000, &(0x7f00000001c0)="9c09932ec88d347ae82189818add1a63a80a482329c8808aa5f4bddb54a25f632fd94a51deb53b2ffddf12b7bcf1d5978939cf0ab618c3b2139969689804a3005567d14a9ec932fd1122c40e953e38b0bf40dee4d749ff0e9d3db6577985d27fa8809a8ea206efbbba8e082affddfe019758cc6a3bbf4a78482cb48ced730cfa00ed8856e61fe7534d59e3cfed8463b321b295532202768dd62c396bbe25de8657b029b235bd6e63c5f37b394607baea3779ceadf5695afbf99f1a9447972571bbecc8b86cc5adf686fa0392a9c7b1950342f4d3c5478362383cbbcbf01f4f5d2a0466501487299933e90bcfca9d15c3aec9cb92e3132925ecd76d1ce9bd3e9146592fac685352f6189ca581651f21427e89610fb6fe82384ddfbfa1c19745b72d4a0448adc46d3db4b2501d57d4cc8985499fed9c78d41757183bebe8f8c7eb46fe7286c019838936120a339bff328c77532a9d74fb2624bf2f60d777fde8abf36ee2ae9b1cf39e812b79ec4d9e5cae9d8a01c949cefa7426c0a5212b38166cbb8cf6a9e2fd1b7332fc2e6d7eb6694804d441479576310914f5ec54cc8a19b5f5e4e152da911dd62ce3df7a51cf9af04791c7684c05146579d4ac59746eb60e7b9fc449f31dcae5112c22256b13d7ff08a5ea9af5b4eeeb0f58486ada24ac02ef71953d2d5403ef6f1d185ee064785687177f4280d5c2a5b97c9a7cced100671af1c94f80f820eaadfb74d5e16cf6f0098c4df7b6739e89ba9bba03989198f0fe7568393557761364dbe07fe96107532bf86ec4e954d74c710ee577a687fc33a5346de13c2d5e57b8b79480f2f8d547f520e6836e46e7adb6ae028d3a07b3ce950b81f32ba8760e4548b0eab5926191b53c910b771ca798923e06ce8fad018b88e8dce07f85fdf7533978621200cfa0a58b96adc2a5af2f0d9b65c77122b7bfb0d51edf10c873432bd8048192043bd8f6d4c9b99bda9fbb13e33a5900234f4271e1206a6f3cc0cef481ffac36736f4d66480a00093e961311c6b80f98770ed7ed90fcd1b9dc073c45f22835ee3dd7ceb484c5b73fa4e2d91ca888d684bfead007b0cab4ffef38889934b6e08389bc37e1e89fbfb9daf3198ac890bc6d07deb2dcd244babd64692584be2d63cb49269c32f2482d80b8baae501fa7d19e38bf31589149834c12ee0a357cddaf14bc4babfc71c751f466534a2e25d37d3e308a1ca025cc4fd6c13dff4a5c3068ac5c4a3158f71a37f2aee1c3ee05ea7281fb4a8edbba853fd0e5595b4be35c5ea25c3687d528d57859539c54108e25605ad9ec159f181157c6452fe64117cf01c6a3ae2f12db7393db37ec32728cb07c7f7baf2f46d98265d58e7820e68dd088f75cd2edcc72ab693869b0e78f9aa22ae44ddf2bda5df2edfd24b2c810403337c602c012ac2ed89247ebe61c323147f4c008f3cdb396d6a0485d7b0fbcfb23daa61eaf3162cf1916b91355b25c458e2a4e3a9738d7a63193dc84bf0545adedfbcf4407e658c66c396eab4f797dcc280788784c160ec82f768283a82acc697e8835178f4648d7d4c9590fb8a787cff8ac811523659cc6c1474914500146a3fbb5e9342194a8ee1d83c2754af79b0460c8f9454c48a6c030508f68c1459fce84d3d3884e75874a7e6e94a731cb69305a02e69f8fdcbc420912a6b7ab540ca40f17593021e236869b809eadf3e69543a50a097972443a93ce9e3b5145327b2376650ee10c656bd8e5fa827d270b5fed5c5f36f8e75bd5a8532aef3661032008fcb42bb3ed85b6700ab492ad53bf647507a5597ec170e8ca0ee95abb2e12f536b3daf8fbe0eaa27c4f727ae7188ff2f75423fef6612013823988527ae249335cf2c49ebe87fd80e1a63bd17397d1cbfebd8672de1cf4775498261676e7946ca60217455f46019bd47f6f1a645dc4d3543f02471fe797f6128bd3b9929751dc3db07c353d4c054e3b857b213d2edbc9d65f68bcc8e6fd66eda9dae72c9acfb5c9672b1220e27f3befeeb1094a171265479f220b92b9a707d1cdcb8082b2674747e06ebe314b8c4e8394fd78f902da7ae0214d48e44cc20702d57241dbad3d42c5ac526653abca3c55cbc14c1c1534376595f8605870e81ff117b5dfdbd873eebb4bffbc6d80bd83ab21ac7e8b8b71924568578d18c98c9ec8c8d0fac29395d73477cd4908add34c5b5de92047eea19ea5b23355a72b27c324e22501f307ff1dc2804c80d0e32e93beeb71f2036172e3d586d6127ee9615b72cea35f833ca811ff36848833f1c8234fe6e011fd9319c6b39ac31f392df9977174c7cc957319c0f62ee621f7514966102945e70e44f3966a68feb6cc7524ab80ce62ffe1427488b7d22fadc3ae3ec4d227188537a5189cded1efa35e37f0476b657035b174e37be3cfd4399bd9027edc9b26da392a393640f36183e296e75210cade11c9fa497d75950b816978f5b0248598e78cd24841a28ea698b39b528a6da55a290e62b502bb386881afcef7329d60ac5c10a642a349be319f4c493c008cbdc76429e09716a15dc287aefa00133a48667eeda828d87d3e8047bb4de8661af9993b66796ac4140ac114610d9600a81f64a228fe67ed7922b645682bb8d7e7e9dba85407827adf8ab28aff03a0d265276151b343a01d18a48f0249a3d9933139419b400f88507a8d93bf0023cf76e7e4efafe5246611151a2ddc821865cb9f987cbfca57774f882f06bd3ecaf50551bba0d597b20e72453e440dcab825935cf83d8e6ccb11be9ef5164fea60d2c4c7da7fd592764738bbe617f42132cf150ab054b8718a0677e6bc299ed0e7e523d88bec1b40a4c420dcdd52d36866dfe25afe6dc4815b8811a9cea0c77a32d741781eaea44120c7fca2de44fb3b56d6c80068e12f0f78ee8984b87c62ead998c0948935c066035a7737efa5a7d4700202e8ac8a412b2bebee85cfa4d4f286893d31db46b6509ab1cf5a0d6b1984492c88175dfe3f7b9bed223878de23c525ae63f893686633c699c8e33717cb548ca1699b362223e4481ad495e5ed97af1df034f11b59888ae1ad2d02ade23bea27e6f4580ce5e2b7e5422891619afdbfb0ac24b7118b7f213c3a4dd65f4184a7a02568d4f51b24113fc30da9c9c677fe93db757a3c0a3a228692c55962154f7ce4f744398fa71549ac363e67a1070f466a99df3f4f9762fc642171dfe573f514f59265f23a8bce5eb42c7bf20b8b1682a72ab1097284a46a99f766e29972fffe6b7a42a7e9546019249cabcc7718e0d43ed4b26326421a5948ae2e7de63c5ff9d22ba88b729bfebbaf81d00d43700e1fc921268880941614746c8d7c2b6857704411f6e38c055518059d6c08c28e1ae87c7cc9e8c4ba0fe6bd3f36e06a172b6d02253b21bff79247cadc3b25a5bec6c554a0dcb201b510cc0d219812162ca9e497840a2e8a56c002f4a6c238c3c2444881278f13bcae0ee01ed2bb4a48a703297887930e92b9df86a3b61ad789ea418847738b903646ce67b25ddbb238cb101bd8260caebbd84a49aad60c52ed2115734b5bde28283e8c3aafbd4c59947e8a27ab363978bb0f62b974b4aaa0e6a2b1c00afae421921022806c2772ba361955cea83b87aa4701f06f7c58965cf9e95c5fd130421c27bee6d6605c5791e46c3913a453de62b8dfb4a460c095eba6850d46def50434788edba37fcf5eae5f16d975feac7b25f54516729c85165c1df2e28a47868a1591314675df02404b4dbec971bf457c32c9f3c987d546c4ee5dcc020405c2b9c456805e96a142132aca4c9337c85788883c42e03bb7fca667b7ea1e2f6ed5b6e67541a75ab3c300cfa3dd468e74093fec11fc29a9ce410a34296b6c28d8dc7f2676f9eca6206b9951ef543ece2ab10ec1b25a2b178286f2c19fd07b2d0b0c18280844622cf7d7d9b935280b3d5a3fb3eb0e0af6717cd74fadf4913e3ad4cfed4a043b309ef4c18b0ae16a4951e572cfd93cb72162447ad03c81ae18e8a91eb5c3b58223770241b2f871496541561569d1c43d07920c9fc3f999f3b2a4ac84922efa1adc18c5d19f7b5e9c9902d944e83ebf46ec8fcffbc16939759981a0b0b6eea999afb06a0368afce1cf14e05892d7369f14a6a118acfb7632d93074672a9a375e34c123603c4aa2bbcc6d430ae4d2c5f553b0e17724f569bd96c5c59eedf091c535655a84579d1cf0f5a634164b842ebca59acf720ccc35ebec6c30a3ef103a721e3e6e90521744c54d96f4d13fd3f1e0940b7825b913f10b51a936e06630f76c22639391b9908ed49b512b2163ba27ec84656d3b9109c7b79718c64e952709a1ceb144438229754f7bbb6c167de8004e4c1d4550e9915f423f391c5700205200b1fd3bf202c080891caf00fb6cc719cffcccd4d0e949f1a87bcb19c353e91105077b65058f85777231b5edae5fd4e3d5cd450cd7071851d0f5ca3fdbe657a4ee2c759b642b5f8838e4442bc275bfdef9a092c08015f61992a7bc27e47a655324fc8abc7691cb3249d40375b25d461822988acd2ccee6b2f3803a5c934e3c5ba3af8bbde7520af6d744e6a09d514d54e33c5f3dabea196c4b299a1e9cb794974324039af386b1982282f85088771bbf771a9b82dadf47e414e58df3107d854bf7c9fe2f996865c8ca3ede2eaf68f9f5257fede35df8250f20c7823e868fcb0e42522fa1ad389b37ac207e596a4d6646dc3c6b9554e6c4b03c11f9492418e5479f08ae13fef60886a33f11d42d332b4604b23a25ab2e1ccd983bfd6fd27ded5b6fe2cc3a526c8c9c725c416f050214c9c06c2f48e9f06ece9b55eef2ec83001896efbc812597a53f067614115cc97a23270450cd3867e36a79b77ed6072eb108012110b6dbaf9d1abfe6cd2d7e7186a9239e2d44a8a62b5a7d742ecbcee53cf7b5e424e7e72474d07c93adde9b173a20ca7cac8b7a0df5a2507f5ee1bbfc3be6ffee32ff7436e6fb2b5009f2b173fe33bbe9c51c37eefcf46153075f7b12ae69f4384dfbcf2571f3b0823888d7f3438a9fb8ab75449ec2135f80046d1caffacf2a8aca624aeb1525f4d70ba88a0aae87b3dd21a1ae697e7724085122488a87e8650aaafbe77c3b99fdc306da78f80ac5dbaa70c3dd12f703e84c65f24a6e2a97786845cbdf3bbcf158e9671ec39c95d9dfc54ff7db5c3444239b2290043c1bb69871b062cb0375be4a46c20570c4834e64a4251d7ab6e6e76e3f927b218d2b7ad5144052cff8f87c8728c86a42de3870f4ce05f1a015a145867af0908167929bb09f0322d42e2dad9c2351cd2b93c912c50af10bef0f8655d646c379b4f2cc285d300800b6d9863e96949b21676bcb258782aeb3057a4079a2e777fe7d16c7132036964bbe032146d874d8b9acc12ac1027f057abab5d87573eadecbd7145ef73a2b7682c75f85a968463091ce69f4edfb89c8765c5447605f9ee598502ea1e1abb77825286ff190fa1c68d9995439fef2f08d85db2f60508f8bc627480e34029fd9ca1a2c32dbb142b67b156b34534007565b93c4044aedc8eb27ed9e9eaae83c0f76fd306693d064a1f48cdd7a82e7e2f41715599fc3b1d0338fe61e561c224702c82403733d9a268013cfae5cd3203d0f39eb70ecb680a88488aad830399853c108586e2ca22391c7ea05a2963152f7dfe7fd2342fcb9037b263e502bbc5ff2718c1693843e8cdbfa6820333f25f32cadfd3078aa440ff6057aa2401863dc56a8497a62a284f0607004f66003cfeab15d8b4ee1e96d9ebaf73097aee9c8e0b52756ec9f2f86450911c979e30"}}], 0x38) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r4, &(0x7f0000000100)=@xdp, &(0x7f0000000180)=0x80) 06:33:58 executing program 1: r0 = socket(0x25, 0x3, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/pid_for_children\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x1402, 0x400, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x0) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x5d) 06:33:59 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:33:59 executing program 0: r0 = socket(0x2, 0x4, 0x3) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1404, 0x20, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8801) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:59 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:59 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x2}, 0x20) 06:33:59 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)={0x9, 0x2, 0x4, 0x1000, 0xffffffff, {0x0, 0xea60}, {0x2, 0x0, 0x4, 0x9, 0x0, 0x8, "7e99f70d"}, 0x1, 0x2, @fd, 0x8001, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000240)={0x4, 0x0, 0x4, 0x10000, 0x80, {}, {0x5, 0x1, 0x7, 0x20, 0x1, 0x1, "72bc578e"}, 0x7429, 0x2, @offset=0xffffffff, 0x7fff, 0x0, r3}) write$FUSE_OPEN(r1, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa722e129ece21d7a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00 ', @ANYRES16=r0, @ANYBLOB="10002dbd700001dcdf2500000000000021000100000040000900030000000000110000000000000007000300000000001b004e200000"], 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x40040) r4 = socket(0x9, 0x801, 0x1000000) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}]}, 0x1c}}, 0x20000000) r5 = socket(0xa, 0x3, 0x3) connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:59 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:33:59 executing program 1: r0 = socket(0xa, 0x3, 0x3) socketpair(0xd, 0x80000, 0x4, &(0x7f0000000000)) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000080)=0x34df) 06:33:59 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x3}, 0x20) 06:33:59 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:33:59 executing program 2: r0 = socket(0xa, 0x3, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:59 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x4}, 0x20) 06:33:59 executing program 4: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:33:59 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) recvmsg(r0, &(0x7f0000001200)={&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001100)=""/208, 0xd0}, 0x40000102) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001240), 0x133140, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000001340)) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000001280)={"aca2ad2af3dd732f04f7420350b0c1560a42c1a1872a56c5ea2a82bb9c7c", 0x7fff, 0x1, 0x401, 0x5, 0x20, 0x10001, 0xeb, 0x7, [0xda, 0xfffff080, 0x1, 0x3, 0x80000000, 0x7, 0x8, 0x2, 0x6, 0x4, 0x7, 0x8, 0x3, 0xfffffffd, 0x6, 0x100, 0x1, 0x1, 0x100]}) r2 = socket(0xa, 0x3, 0x3) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000001380)) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:33:59 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0xa, r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000000), 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000100), 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000140)=""/209) 06:33:59 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{0x0, 0x3f}, 'port0\x00', 0x0, 0x80402, 0xce, 0x101}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x1, 0x2, 'client1\x00', 0x5, "8925ba902cc4c714", "31ef7a699d7753c488ac223b26a7b597d51fcb01ab71346a55deb4bf6c58113f", 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0xa, 0x1, 0x1, 'queue0\x00', 0x1cb}) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:33:59 executing program 4: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:33:59 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x5}, 0x20) 06:33:59 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80001) recvmsg(r1, &(0x7f00000006c0)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/167, 0xa7}, {&(0x7f00000003c0)=""/150, 0x96}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)=""/6, 0x6}], 0x7, &(0x7f00000005c0)=""/233, 0xe9}, 0x20) 06:33:59 executing program 1: r0 = socket(0xa, 0xa, 0x40003) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x20) 06:33:59 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x6}, 0x20) 06:33:59 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:33:59 executing program 4: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:33:59 executing program 0: r0 = socket(0xa, 0x1, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:33:59 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0x0, 0x5}, 0x20) read$sequencer(0xffffffffffffffff, &(0x7f0000000180)=""/154, 0x9a) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff, 0x2}, 0x20) connect$l2tp6(r0, &(0x7f0000000240)={0xa, 0x0, 0x4, @private2, 0x175ecca4, 0x1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000340)={0x0, 0x10, 0x401, 0x0, 0x6}) read$FUSE(0xffffffffffffffff, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r2}, 0x78) r3 = getpgrp(0x0) sched_rr_get_interval(r3, &(0x7f00000000c0)) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0xfffffffffffffff5, r2, {{0x1000, 0x401, 0x0, r3}}}, 0x28) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) connect$l2tp6(r4, &(0x7f0000000140)={0xa, 0x0, 0xd4, @private0, 0xfb7, 0x3}, 0x20) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) getpeername$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x20) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000000280)={"b22cce0b1ddf6d76c176b7aad631f5cf4ef66b4a252e0e5c6a180e9c5e05", 0x8, 0x2, 0x401, 0x5, 0x3f, 0xff, 0x2, 0x0, [0x200, 0x101, 0x5370, 0x0, 0x4, 0xf4b1, 0x10000004, 0xfffffffa, 0x40, 0x9, 0x6, 0x8, 0x4, 0x0, 0xfffffff9, 0xfa16, 0x9, 0x3ff, 0x9]}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x10000000) 06:34:00 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x7}, 0x20) 06:34:00 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:34:00 executing program 4: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:34:00 executing program 1: fork() r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000100)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000280)=""/212, 0xd4}], 0x3, &(0x7f00000003c0)=""/4, 0x4}, 0x12002) r2 = socket(0x23, 0x2, 0x5) r3 = accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80000) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff, 0x4}, 0x20) accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10, 0x80400) 06:34:00 executing program 5: r0 = socket(0xa, 0x3, 0x3) getpeername(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000000214000425bd7000fcdbdf2505005400010000000800f2fff942d14a7649a3fb00"/48], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x27, 0x8000a, 0x90d, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) socket$nl_generic(0x10, 0x3, 0x10) 06:34:00 executing program 0: r0 = socket(0xa, 0x3, 0x3) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f0000000040)=""/78, 0x4e, &(0x7f00000000c0)=""/182, 0x2, 0x3}}, 0x48) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:34:00 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:34:00 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='bdi_dirty_ratelimit\x00', r1}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={0xa}, 0x10) 06:34:00 executing program 4: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:34:00 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:34:00 executing program 1: r0 = socket(0xa, 0x3, 0x9) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x20) 06:34:00 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x8}, 0x20) 06:34:00 executing program 0: r0 = socket(0x1a, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:34:00 executing program 5: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f00000005c0)={0x28, 0x0, r4, {{0x9, 0x9}}}, 0x28) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000002c0)=0x20) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20044005) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x1) 06:34:00 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:34:00 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x140c, 0x400, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x4) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1406, 0x20, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc848}, 0xc4) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:00 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x9}, 0x20) 06:34:00 executing program 4: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:34:00 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:34:00 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000d00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x3, 0x7, 0x0, {0x4, 0x4, 0x2, 0x2, 0x99e, 0x1743, 0xd1, 0x9, 0x1, 0x0, 0x8, 0xee00, r1, 0x9, 0xc4}}}, 0x78) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000000)) r2 = socket(0xa, 0x3, 0x3) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:00 executing program 0: r0 = socket(0xf, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:34:00 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) socketpair(0x0, 0x6, 0xc0000000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x20) 06:34:00 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa}, 0x20) 06:34:00 executing program 0: r0 = socket(0xa, 0x3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:34:00 executing program 4: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:34:00 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1405, 0x2, 0x70bd29, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:34:00 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:34:00 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x10}, 0x20) 06:34:00 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d03, &(0x7f00000020c0)=0x61) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000002080)={0x18, 0x0, r0, {0x8001}}, 0x18) clock_gettime(0x0, &(0x7f0000002100)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000002140)={0x100, 0x5, 0x4, 0x40, 0x6, {r1, r2/1000+10000}, {0x2, 0x8, 0x7f, 0x20, 0x7, 0x5, "72ec49f6"}, 0x7, 0x4, @userptr=0x6, 0x6}) r3 = socket(0xa, 0x3, 0x3) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:34:00 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:34:00 executing program 0: ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000040)={"6e65f8982338ab13c8f0a66247ddaf68d86ec1557bbd61aa47814c87c13c", 0x7f17d43b, 0x2, 0x3, [0x1, 0xffff, 0x9, 0xffffffff, 0x7, 0x3, 0xa7, 0x152, 0xffffffea, 0x81, 0x2a, 0xb7e1, 0x3f, 0x3, 0x9, 0x40, 0x6, 0x10000]}) r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:34:00 executing program 1: socket(0xa, 0x3, 0x3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 06:34:00 executing program 4: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:34:00 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x10001, @remote, 0x6, 0x3}, 0x20) 06:34:00 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x300}, 0x20) 06:34:00 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) socket$bt_hidp(0x1f, 0x3, 0x6) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:00 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, 0x0, 0x0) 06:34:00 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000080)={r0, r0, 0x1000, 0x26, &(0x7f0000000040)="4f699477dcdb5c9d1c7b39c3ae244be6532121cfbc6ea063155635a06e864f9c0478176809f0", 0x1, 0x7, 0x9, 0x2, 0x81, 0x2, 0x6, 'syz1\x00'}) 06:34:00 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7bf}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7fff}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x93}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000001c0)=""/104) socket$l2tp(0x2, 0x2, 0x73) 06:34:00 executing program 4: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:34:00 executing program 1: ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x2}) r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:00 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x500}, 0x20) 06:34:00 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, 0x0, 0x0) 06:34:01 executing program 0: r0 = socket(0xa, 0xa, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:34:01 executing program 5: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:34:01 executing program 1: r0 = socket(0x25, 0x3, 0x3) syz_open_dev$dri(&(0x7f0000000080), 0x44abfccb, 0x10000) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socket(0x10, 0x3, 0x5) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xfffffffffffffffe}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x140c, 0x300, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 06:34:01 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, 0x0, 0x0) 06:34:01 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x600}, 0x20) 06:34:01 executing program 4: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:34:01 executing program 5: r0 = socket(0xa, 0x3, 0x8) socket(0x1e, 0x800, 0x7) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:34:01 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6, 0x3}, 0x20) 06:34:01 executing program 4: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:34:01 executing program 1: socket(0xa, 0x3, 0x3) socketpair(0x33, 0x0, 0x4, &(0x7f0000000000)) socket(0x10, 0x2, 0xfff) 06:34:01 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x0, 0x3}, 0x20) 06:34:01 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}]}, 0x30}}, 0x8040) r1 = socket(0xa, 0x3, 0x3) connect$can_bcm(r1, &(0x7f0000000000)={0xa}, 0x6e) 06:34:01 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x700}, 0x20) 06:34:01 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/227, 0xe3}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/104, 0x68}], 0x6, &(0x7f0000000440)=""/188, 0xbc}, 0x60) 06:34:01 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x20) 06:34:01 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000040)='1', 0x1) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:34:01 executing program 4: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:34:01 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044041}, 0x8001) 06:34:01 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x900}, 0x20) 06:34:01 executing program 1: r0 = socket(0xa, 0x80000, 0x5) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x20) 06:34:01 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) socket$bt_hidp(0x1f, 0x3, 0x6) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:01 executing program 4: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:34:01 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000280)=0x38) r1 = socket(0xa, 0x3, 0x3) getsockname(r1, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x80) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r4}, 0x78) connect$can_bcm(r2, &(0x7f00000002c0), 0x10) write$FUSE_OPEN(r2, &(0x7f0000000100)={0x20, 0x0, r4, {0x0, 0x1c}}, 0x20) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x440, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) ioctl$SOUND_MIXER_READ_CAPS(r5, 0x80044dfc, &(0x7f0000000340)) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x410180) write$FUSE_OPEN(r6, &(0x7f00000003c0)={0x20, 0x0, r4, {0x0, 0x9}}, 0x20) write$FUSE_STATFS(r3, &(0x7f0000000140)={0x60, 0x0, r4, {{0x1, 0x5, 0x7f, 0x3, 0xfffffffffffffffa, 0x5, 0x7}}}, 0x60) 06:34:01 executing program 0: r0 = socket(0xa, 0x3, 0x3) socketpair(0x4, 0x4, 0x9, &(0x7f0000000040)) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:34:01 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) socket$bt_hidp(0x1f, 0x3, 0x6) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:01 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:01 executing program 4: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:34:01 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getpeername(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000100)=0xe1) r2 = socket(0xa, 0x3, 0x3) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x40) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x3, 0x100, 0xb4b8, {0x0, 0x2710}, {0x77359400}, {0x1}, 0x1, @canfd={{0x1, 0x0, 0x1}, 0x2e, 0x1, 0x0, 0x0, "a59d3de67abc4d1b03e79b141b359f9cd47cb998527e5014dc1152dbd4aac441c9d21e10b12ac114a91ea9ce96cba1e43937d3a2fee7cf77fc835e532416d219"}}, 0x80}, 0x1, 0x0, 0x0, 0x30040081}, 0x8000) 06:34:01 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x3f00}, 0x20) 06:34:01 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) socket$bt_hidp(0x1f, 0x3, 0x6) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:01 executing program 4: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3e}, 0x20) 06:34:01 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) getsockname(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'sit0\x00', r3, 0x29, 0x8, 0x4, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @rand_addr=' \x01\x00', 0x10, 0x700, 0x6, 0x6e7}}) 06:34:01 executing program 0: r0 = socket(0x29, 0x80000, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:34:01 executing program 1: r0 = socket(0xa, 0x3, 0x3) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000080)={{0xff, 0x80}, 0x1, 0x8, 0x3, {0x20, 0xff}, 0x3f, 0x6}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) getpeername(r0, &(0x7f00000001c0)=@nl=@unspec, &(0x7f0000000240)=0x80) recvmsg(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000000)=""/40, 0x28}, {&(0x7f0000000100)=""/145, 0x91}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/23, 0x17}, {&(0x7f0000001200)=""/189, 0xbd}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x6, &(0x7f0000003380)=""/4104, 0x1008}, 0x2100) 06:34:01 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x4000}, 0x20) 06:34:01 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:01 executing program 5: socket(0xa, 0x3, 0x3) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x22a00) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000080)={{0x7, 0x80}, {0x2, 0x5}, 0x9, 0x4, 0x6}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000000, @mcast1, 0x0, 0x1}, 0x20) 06:34:01 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:34:01 executing program 0: r0 = socket(0xa, 0x3, 0x3) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:34:01 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = socket(0x1, 0x5, 0x250004) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000140)) write$FUSE_STATFS(r2, &(0x7f0000000180)={0x60, 0xffffffffffffffda, 0x0, {{0x61e, 0x6, 0x8, 0xfbee, 0x5, 0x7, 0x3, 0x8}}}, 0x60) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1a, 0x9, 0x5, 0x7, 0x3172, r0, 0x2, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x40) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000100)=0x95) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket(0x15, 0x5, 0x0) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x3, 0x2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000a00)={'vcan0\x00'}) 06:34:01 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x80fe}, 0x20) 06:34:01 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:01 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:34:01 executing program 5: r0 = socket(0xa, 0x3, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:34:01 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:01 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xfe80}, 0x20) 06:34:02 executing program 1: r0 = socket(0x9, 0x5, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:02 executing program 2: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:02 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:34:02 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:02 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x402, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x101, @local, 0x9, 0x2}, 0x20) r1 = socket(0xa, 0x3, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x2, 0x6, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x80, 0x80, 0x8, 0x7}}) write$FUSE_OPEN(r2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="368a7e5feac887b6cf4c6416e38a16f03bc8680d7ef85057057c9b2cdf3a665ef74119f2b36b83e17bab6f507b6d676f149949cd9303716a561b27c47c2a83423b22fecd8668d8de8a8b82275b7cadac0f4f97ff7f4d350d2526aeaae679ba68397cad8b47e7ee819c1e7a611d03d479e8a823dc109706f90e4155aed42206c69ca97a8e535e3dae11c0aa4fcac2eff405a711e3dd48cfe9e310d2adcb787acb43b21941369ae7f8b61c6fe597de6ca239f62824ac3f52f365de5d6c4af0c23e870df78af4e157af52a5", @ANYRES16=0x0, @ANYBLOB="00032abd7000fbdbdf2507000000050022000000000014002000"/42], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:34:02 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x100000}, 0x20) 06:34:02 executing program 1: r0 = socket(0x6, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:02 executing program 2: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:02 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x20) 06:34:02 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:02 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x1000000}, 0x20) 06:34:02 executing program 1: r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r1, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socketpair(0x1f, 0x5, 0x80, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:02 executing program 2: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:02 executing program 5: r0 = socket(0xf, 0x3, 0x5) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:34:02 executing program 0: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:02 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x20) 06:34:02 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x2000000}, 0x20) 06:34:02 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x1}, 0x8) r0 = socket(0x2a, 0x3, 0x9) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) socket(0x25, 0x800, 0xfffe0000) 06:34:02 executing program 2: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:02 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000815) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x21, 0x6, 0x2000000, 0x4, 0x8, 0x0, 0x8}}, 0x50) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c000010", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf25030000000c0016000004000000000000140008006e657464657673696d30000000000000060003000004000014001f00ff01000000000000000000000000000114001f00fc020000000000000000000000000000050014001f00000006001c00080000000500040000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48040) 06:34:02 executing program 0: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:02 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x20) 06:34:02 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x3000000}, 0x20) 06:34:02 executing program 5: r0 = socket(0xa, 0x3, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140c, 0x1d, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4081) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:34:02 executing program 0: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:02 executing program 2: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:02 executing program 1: r0 = socket(0x3, 0x3, 0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000001740), 0x20800) bind$l2tp6(r1, &(0x7f0000001780)={0xa, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x4}, 0x20) socketpair(0xb, 0x2, 0x800, &(0x7f0000000000)) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:02 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x4000000}, 0x20) 06:34:02 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r1, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socketpair(0x1f, 0x5, 0x80, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:02 executing program 0: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:02 executing program 5: r0 = socket(0xa, 0x3, 0x3) getpeername$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x8001, @private1, 0x5, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) 06:34:02 executing program 2: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:02 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r1, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socketpair(0x1f, 0x5, 0x80, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:02 executing program 1: r0 = socket(0x5, 0x3, 0x5) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x107000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @mcast2, 0x0, 0x8000000}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000200)={0x7, 0x7, 0x1, 'queue0\x00', 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x40) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f00000002c0)={0x8, 0x8001, 0x8}) write$FUSE_OPEN(r5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x2, 0x3, 0x9, 0x460, 0x1, 0x6, '\x00', r4, r5, 0x3, 0x3}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) 06:34:02 executing program 0: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:02 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x5000000}, 0x20) 06:34:02 executing program 5: r0 = socket(0xa, 0x3, 0x1) socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff, @mcast1, 0xfffffffd}, 0x74) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001014ff0227bd7000fddbdf2508001500020000000800010000000000080001000200000008004a0002000008080003000100000008004c000100000008004c000100000008000300020000000800010001000000096a07bdcce2f0d5cc946254ef00b12d0594882d77b2bd629bd0551b10bcc5a8969ce8218a048c3bb55f5958210052769bcbdc75da2d4ccdfdd7e37e74bf2fa35b7a4929d69a1068575ff69b5c7d365f11f9bda262b3175dd93f791496c4fd0d15ad03cce4e74e10a1e8d02b97d94a6bddb1d8439c20fcbbe64b4f4ac0c6d263f94915ba5f87d51a7a5c31392b3025b479a2633ec080aceae115174cae8b"], 0x58}, 0x1, 0x0, 0x0, 0x4000012}, 0x8801) 06:34:02 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r1, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socketpair(0x1f, 0x5, 0x80, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:02 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x6000000}, 0x20) 06:34:02 executing program 2: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:02 executing program 0: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:02 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r1, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socketpair(0x1f, 0x5, 0x80, &(0x7f0000000100)) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:02 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x7000000}, 0x20) 06:34:02 executing program 1: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x7fff, @empty}, 0x20) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x20) r0 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x20) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0x7f, 0x1b}, {0x1, 0x9}, 0x1, 0x5, 0xf7}) socketpair(0x1d, 0x5, 0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x8001, @private1, 0x400, 0x2}, 0x20) 06:34:02 executing program 5: r0 = socket(0x2c, 0x800, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000340)={0x5, &(0x7f0000000040)=[{@fixed}, {@none}, {}, {}, {}]}) 06:34:02 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r1, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socketpair(0x1f, 0x5, 0x80, &(0x7f0000000100)) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:03 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x8000000}, 0x20) 06:34:03 executing program 0: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:03 executing program 2: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:03 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r1, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socketpair(0x1f, 0x5, 0x80, &(0x7f0000000100)) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:03 executing program 1: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000200)=0x80) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000240)=@x25, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/227, 0xe3}], 0x1, &(0x7f0000000400)=""/65, 0x41}, 0x2000) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x9, 0xfff, 0x0, 'queue1\x00', 0x6}) 06:34:03 executing program 5: r0 = socket(0xa, 0x3, 0x3) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/186, 0xba}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/13, 0xd}, {&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/32, 0x20}, {&(0x7f00000005c0)=""/69, 0x45}, {&(0x7f0000000640)=""/68, 0x44}], 0x8, &(0x7f0000000740)=""/60, 0x3c}, 0x400000f1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r2 = getpgrp(0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/pid_for_children\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x200300, 0x0) r4 = fork() write$FUSE_LK(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, {{0x0, 0x7fff, 0x2, r4}}}, 0x28) 06:34:03 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x9000000}, 0x20) 06:34:03 executing program 0: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:03 executing program 1: socket(0xa, 0x3, 0x3) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xfffffffc}, 0x20) 06:34:03 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r1, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:03 executing program 5: r0 = socket(0xa, 0x3, 0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x400000}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x20000004) 06:34:03 executing program 2: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:03 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa000000}, 0x20) 06:34:03 executing program 1: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8041) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7e}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x2000000) r2 = socket(0xa, 0x3, 0x3) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x480200, 0x0) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2104000000000000004f49d67cdb90838bc87118c075df250000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x20040085) socket$vsock_stream(0x28, 0x1, 0x0) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0xffffffff, @empty}, 0x20) 06:34:03 executing program 4: socket(0xa, 0x3, 0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r0, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:03 executing program 0: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:03 executing program 5: r0 = socket(0x29, 0x3, 0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x1) recvmsg$can_bcm(r2, &(0x7f0000000180)={&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000140)=""/13, 0xd}, 0x2) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 06:34:03 executing program 2: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:03 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x10000000}, 0x20) 06:34:03 executing program 4: socket(0xa, 0x3, 0x3) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r0, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:03 executing program 1: r0 = socket(0xa, 0x3, 0x3) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x8, 0x2, 0x4, 0x10000, 0x81, {0x77359400}, {0x1, 0x8, 0x2, 0x44, 0x44, 0x2, "8e94a8a7"}, 0x52ab74ca, 0x6, @planes=&(0x7f0000000000)={0x4, 0x0, @userptr=0x400, 0xaa25}, 0x100}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:03 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname(r1, &(0x7f0000000040)=@ieee802154={0x24, @long}, &(0x7f00000000c0)=0x80) 06:34:03 executing program 0: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:03 executing program 4: socket(0xa, 0x3, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:03 executing program 1: r0 = socket(0xa, 0x3, 0x3) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f00000002c0)=""/119, 0x77}], 0x3, &(0x7f0000000340)=""/207, 0xcf}, 0x10000) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) connect$can_bcm(r0, &(0x7f0000000480), 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0xcd447c1a57a1d67a) r1 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r1, &(0x7f0000001a80)=@hci, &(0x7f0000001b00)=0x80) 06:34:03 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x3f000000}, 0x20) 06:34:03 executing program 2: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:03 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x21, 0x7fff, 0x0, 0x6, 0xe, 0x4, 0x3}}, 0x50) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) recvmsg(r2, &(0x7f0000000400)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000140)=""/205, 0xcd}, {&(0x7f0000000240)=""/149, 0x95}, {&(0x7f0000000300)=""/186, 0xba}], 0x4}, 0x40000041) syz_open_dev$dri(&(0x7f00000004c0), 0x7a0, 0x22800) 06:34:03 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x40000000}, 0x20) 06:34:03 executing program 4: socket(0xa, 0x3, 0x3) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:03 executing program 0: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:03 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x3f000000}, 0x20) 06:34:03 executing program 2: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:03 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xf5ffffff}, 0x20) 06:34:03 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:03 executing program 0: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:04 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x3f000000}, 0x20) 06:34:04 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xfe800000}, 0x20) 06:34:04 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:04 executing program 2: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:04 executing program 0: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:04 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000002c0)={0x0, 0x81, 0x1}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00082cbd0440fddb003f000000"], 0xffffffffffffff35}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000000)={0x1, 0x3, 0x8, 0x5, 0x9, 0x2d13}) 06:34:04 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xfffffff5}, 0x20) 06:34:04 executing program 0: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:04 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:04 executing program 2: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:04 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x3f000000}, 0x20) 06:34:04 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:04 executing program 2: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9, 0x3}, 0x20) 06:34:04 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x17) 06:34:04 executing program 0: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa00}, 0x20) 06:34:04 executing program 4: socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:04 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xfe800000}, 0x20) 06:34:04 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1b) 06:34:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 06:34:04 executing program 1: r0 = socket(0xa, 0x3, 0xffffbfff) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1405, 0x10, 0x70bd2c, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x3}}]}, 0x20}}, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:04 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:34:04 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xfe800000}, 0x20) 06:34:04 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:34:04 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20000020) 06:34:04 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:34:04 executing program 1: r0 = socket(0xa, 0x3, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001080)={r1, r0, 0x9, 0x1000, &(0x7f0000000080)="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", 0x3f, 0x3, 0x2, 0xb4, 0x5, 0x0, 0x1, 'syz1\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:04 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 06:34:04 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xfe800000}, 0x20) 06:34:04 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:34:04 executing program 3: socket(0xa, 0x3, 0x3) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000"]) write$FUSE_OPEN(r1, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfffffefd, @dev, 0x6}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x320080) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000140)={0x9, 0x6745d2ff, 0x1, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000200)={0x20, 0x8001, 0x0, 'queue0\x00', 0x3f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0x2, 0x81}, 0x0, 0x9, 0x8a, {0x2, 0x2}, 0x0, 0x4169}) 06:34:04 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) getsockname(r1, &(0x7f0000000080)=@phonet, &(0x7f0000000000)=0x80) 06:34:05 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:34:05 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:05 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:34:05 executing program 1: socket(0xa, 0x3, 0x3) 06:34:05 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00800000", @ANYRES16=r2, @ANYBLOB="130200000000000000000300000006001d00000000000c0010000000000000000000"], 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00012abd9300fddbdf25080000000500210001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000040)={@any, 0x0, 0x0, 0x54d0, 0x2, 0x8000, "e3a32286f14a447fae371e23672c9085f49da9dc0c9a69fb79f5ae2451692fac601f68aad9a1383235ad51406f0cf39c42d00442a26ac3520ba771c301200ef214029831608dceda03d7dd92cdf6dc84c2f95da41e005314bb958c8aab20c482cbffdcc0499bcd91aca76ad3390e589566cdbd3e0da0a8af55b6eb3a614f42bd"}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000740)={0x7, &(0x7f0000000300)=[{@none}, {}, {@fixed}, {}, {}, {@fixed}, {@none}]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000240)={{0x6}, 'port0\x00', 0x2a, 0x10, 0xf1c, 0x1, 0x10, 0x2, 0x2, 0x0, 0x2, 0x6}) 06:34:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0x0) 06:34:05 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x3}, 0x20) 06:34:05 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:05 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x0, 0xa00}, 0x20) 06:34:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = socket(0xa, 0x3, 0x3) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffffffc}) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0xfffffffffffffcfa) 06:34:05 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x3}, 0x20) 06:34:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x283b, 0x4}, 0x20) 06:34:05 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:05 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) socketpair(0x1f, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x5, 0x2}, 0x20) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001180)={0x2, 0x0, {&(0x7f0000000180)=""/4096, 0x1000, &(0x7f00000000c0)=""/36, 0x1, 0x2}}, 0x48) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) getpeername$l2tp6(r0, &(0x7f0000001200)={0xa, 0x0, 0x0, @local}, &(0x7f0000001240)=0x20) 06:34:05 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x0, 0xa00}, 0x20) 06:34:05 executing program 1: r0 = socket(0xa, 0x3, 0x3) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000000)=0xffffffff) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x283b, 0x4}, 0x20) 06:34:05 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x3}, 0x20) 06:34:05 executing program 5: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:05 executing program 1: socket(0xa, 0x3, 0x3) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x2001, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x9}, 0xfffffffffffffc3a) 06:34:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1406, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xc080) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:05 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x0, 0xa00}, 0x20) 06:34:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}, 0x20) 06:34:05 executing program 5: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:05 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x20) 06:34:05 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socket(0x10, 0x4, 0x2) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) 06:34:05 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1405, 0x800, 0x70bd29, 0x25dfdbfb}, 0x10}}, 0x20000011) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000040)=0x6) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:05 executing program 5: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:05 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}, 0x20) 06:34:05 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x40000000}, 0x20) 06:34:05 executing program 5: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:05 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r5, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r5, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r6}, 0x78) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, r6, {0x1000}}, 0x18) read$FUSE(r4, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f00000000c0)) write$FUSE_ATTR(r4, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r7}, 0x78) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18, 0x0, r7, {0x5}}, 0x18) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x20) 06:34:05 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = socket(0xa, 0xa, 0x9) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3, 0x2}, 0x20) 06:34:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}, 0x20) 06:34:05 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1405, 0x800, 0x70bd29, 0x25dfdbfb}, 0x10}}, 0x20000011) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000040)=0x6) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:05 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x40000000}, 0x20) 06:34:05 executing program 5: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:05 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) write$sndseq(r1, &(0x7f00000001c0)=[{0xa2, 0xff, 0x4, 0x3, @time={0x1, 0x4b}, {0x3f, 0x3f}, {0x53, 0x6}, @time=@tick=0x7fffffff}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0x2, 0xff}, 'port1\x00', 0x30, 0x800, 0xffffffbf, 0xffffffff, 0xd6a1, 0x800004, 0xbfc, 0x0, 0x2}) r2 = socket(0xa, 0x3, 0x3) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x283b}, 0x20) 06:34:05 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0xa000000}, 0x20) 06:34:05 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x40000000}, 0x20) 06:34:05 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000240)={0x10000, 0x1, 0x4, 0x2, 0x7, {0x0, 0x2710}, {0x5, 0xc, 0x4, 0x7, 0x7, 0x5, "299c13aa"}, 0x5, 0x1, @offset=0x8, 0x3, 0x0, r0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)={r1}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) r4 = fork() r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x600101) write$FUSE_WRITE(r6, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x81}}, 0x18) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getpeername(r5, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f00000001c0)=0x80) write$FUSE_LK(r3, &(0x7f0000000100)={0x28, 0xfffffffffffffffe, 0x0, {{0x8c2, 0x7, 0x2, r4}}}, 0x28) r7 = socket(0xa, 0x3, 0x3) r8 = syz_open_dev$vim2m(&(0x7f0000000380), 0x1, 0x2) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000003c0)={0x1, 0x2, 0x4, 0x10, 0x3, {}, {0x5, 0xc, 0x9, 0xce, 0x2, 0xff, "c18677e9"}, 0x983, 0x1, @fd, 0x800, 0x0, r3}) bind$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x60, 0x1412, 0x400, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x48004) 06:34:05 executing program 5: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:05 executing program 0: r0 = socket(0xa, 0x3, 0x3) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r1, &(0x7f0000000780)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/186, 0xba}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/13, 0xd}, {&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000580)=""/32, 0x20}, {&(0x7f00000005c0)=""/69, 0x45}, {&(0x7f0000000640)=""/68, 0x44}], 0x8, &(0x7f0000000740)=""/60, 0x3c}, 0x400000f1) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r2 = getpgrp(0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/pid_for_children\x00') r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x200300, 0x0) r4 = fork() write$FUSE_LK(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, {{0x0, 0x7fff, 0x2, r4}}}, 0x28) 06:34:05 executing program 3: socket(0xa, 0x3, 0x3) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getpeername(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0xfffffdc8) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x80, @mcast2, 0xffff}, 0x20) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100027bd7000fbdbdf250400000008001700", @ANYRES32=r5, @ANYBLOB="050005000000000014001f00fe80000000bc06281883926a259b00000000000000000000bb080019000a01010106001c00e3c700"], 0x50}, 0x1, 0x0, 0x0, 0xc01}, 0x20000800) 06:34:05 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x7000000}, 0x20) 06:34:06 executing program 4: r0 = socket(0xa, 0x3, 0x1) socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff, @mcast1, 0xfffffffd}, 0x74) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001014ff0227bd7000fddbdf2508001500020000000800010000000000080001000200000008004a0002000008080003000100000008004c000100000008004c000100000008000300020000000800010001000000096a07bdcce2f0d5cc946254ef00b12d0594882d77b2bd629bd0551b10bcc5a8969ce8218a048c3bb55f5958210052769bcbdc75da2d4ccdfdd7e37e74bf2fa35b7a4929d69a1068575ff69b5c7d365f11f9bda262b3175dd93f791496c4fd0d15ad03cce4e74e10a1e8d02b97d94a6bddb1d8439c20fcbbe64b4f4ac0c6d263f94915ba5f87d51a7a5c31392b3025b479a2633ec080aceae115174cae8b"], 0x58}, 0x1, 0x0, 0x0, 0x4000012}, 0x8801) 06:34:06 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x140c, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xa81) getsockname$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x20) 06:34:06 executing program 5: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:06 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000000)=0xb6) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:06 executing program 4: r0 = socket(0xa, 0x3, 0x1) socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff, @mcast1, 0xfffffffd}, 0x74) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001014ff0227bd7000fddbdf2508001500020000000800010000000000080001000200000008004a0002000008080003000100000008004c000100000008004c000100000008000300020000000800010001000000096a07bdcce2f0d5cc946254ef00b12d0594882d77b2bd629bd0551b10bcc5a8969ce8218a048c3bb55f5958210052769bcbdc75da2d4ccdfdd7e37e74bf2fa35b7a4929d69a1068575ff69b5c7d365f11f9bda262b3175dd93f791496c4fd0d15ad03cce4e74e10a1e8d02b97d94a6bddb1d8439c20fcbbe64b4f4ac0c6d263f94915ba5f87d51a7a5c31392b3025b479a2633ec080aceae115174cae8b"], 0x58}, 0x1, 0x0, 0x0, 0x4000012}, 0x8801) 06:34:06 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f00000005c0)={0x28, 0x0, r4, {{0x9, 0x9}}}, 0x28) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000002c0)=0x20) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20044005) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x1) 06:34:06 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x7000000}, 0x20) 06:34:06 executing program 3: r0 = socket(0xa, 0x3, 0x3) socket(0xa, 0x5, 0x271) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a3b80ac1e2e8a349170fccd169f7f6b8df96292368486205cc97e5b626b33567d93be4450ccda28cb7a70f770325c9c961db1685b4ac7afdc4609cd13f4a7b31ce274baee32c26f24942d56e39b17614f2b6c10ac661184a498d12fe9d6ef82e375090ecea29e06e676f66c80d61a8968313e59a6daac1079ba38dd9c7b718dfd0e40e8d569c1da43f4826b9590fc4bfb8d47681d85316b4d1aa7c0709bf476e7f8779e646668b43ef48400", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf250600000006001a004e230000050012003f000000"], 0x24}}, 0x41) 06:34:06 executing program 1: r0 = socket(0xa, 0x3, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r1, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000240)={0x77359400}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1405, 0x4, 0x70bd28, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x1) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:06 executing program 4: r0 = socket(0xa, 0x3, 0x9) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x20) 06:34:06 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f00000005c0)={0x28, 0x0, r4, {{0x9, 0x9}}}, 0x28) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000002c0)=0x20) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20044005) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x1) 06:34:06 executing program 5: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:06 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x7000000}, 0x20) 06:34:06 executing program 3: r0 = socket(0x2c, 0x800, 0x2) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x20) 06:34:06 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x30100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8, 0x5, 0x1000, 0xffff78d4, 0x1, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x40) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10}, 0x10) 06:34:06 executing program 4: fork() r0 = socket(0xa, 0x3, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000100)=@qipcrtr, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000280)=""/212, 0xd4}], 0x3, &(0x7f00000003c0)=""/4, 0x4}, 0x12002) r2 = socket(0x23, 0x2, 0x5) r3 = accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80000) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x7ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff, 0x4}, 0x20) accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10, 0x80400) 06:34:06 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x6}, 0x20) 06:34:06 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f00000005c0)={0x28, 0x0, r4, {{0x9, 0x9}}}, 0x28) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000002c0)=0x20) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20044005) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x1) 06:34:06 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3c}, 0x20) 06:34:06 executing program 1: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) getpeername$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x20) socketpair(0x2c, 0x3, 0x10001, &(0x7f0000000000)) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:06 executing program 5: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:06 executing program 3: r0 = socket(0xa, 0x3, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f0000008340)=ANY=[@ANYBLOB="78060000daffffff", @ANYRES64=r5, @ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000100008000000100010000000000000009000000000000000100000000000000ffffff7f0000000006000000000000000100000000000000e2c2000000010000250000000080010020000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ff0700008a3c0000000000000500000000000000f8ffffffffffffff00000000ff7f00000500000000000000030000000000000063e0000000000000080000000000000004000000fffeffff00000000000000000300000000000000010000000000000009000000000000000900000000000000828b0000000000000000008008000000050000000040000000000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000000700000000000000060000000000000005000000000000000a000000eb0000002f6465762f6375736500000000000000040000000000000003000000000000000200000000000000070000000000000004000000db33ffff05000000000000001f0000000000000008000000000000000000000000000000080000000000000009000000000000000001000003000000ff0300000040000004000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="8000000000040000000000000400000000000000060000000000000007000000070000005c2f213f2c2d5200060000000000000001000000000000005e03000000000000090000000000000008000000940000000400000000000000550000000000000005000000000000000100000000000000008000000000000004000000000000000800000001000080010400000080000007000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="040000001800000000000000000000000000000004000000000000000b000000b80a00007b24213a2f2726ce2b2121000000000004000000000000000000000000000000e9090000000000000500000000000000ff0700000738000001000000000000000300000000000000008000000000000005000000000000001f00000000000000ff00000000000000ef210000ff7f0000ff7f000000c0000001000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="ffff000001040000000000000200000000000000cbe80000000000000a000000000100002f6465762f637573650000000000000002000000000000000000000000000000070000000000000001000000000000005c030000010000000000000000000000ff01000000000000c96f0000000000000500000000000000070000000000000000000000000000000104000000000000010001000030000007000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0600000006000000000000000000000000000000000400000000000010000000be0000002f6465762f696e7075742f6d696365000400000000000000030000000000000006000000000000000100000000000000080000000500000004000000000000000000000000000000994f0000000000003f000000000000000100000000000000530100000000000000000000001000000100ffff0040000003000000", @ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="06000000ffffffff00000000030000000000000006000000000000000400000080ffffff2628292f000000000400000000000000020000000000000093668d1800000000e72a00000000000002000000000000020000000000000000d200000000000000030000000000000002000000000000000600000000000000f7ffffffffffffff060000000400000004000000006000007c0f0000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="00000000e1040000000000000300000000000000ef0000000000000010000000010000002f6465762f696e7075742f6d69636500050000000000000003000000000000007f000000000000004200000000000000ff7f000001040000040000000000000000020000000000000500000000000000750000000000000000000000000000007e0000000000000006000000ff0300000600000000c0000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b00200000400000000000000060000000000a300ff0700000000000010000000030000002f6465762f696e7075742f6d69636500040000000000000002000000000000000100000000000000020000000000000006000000f9ffffff02000000000000000000000000000000ffffff7f0000000005000000000000000000000001000000ff000000000000003b08000001000000000001000000000001040000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="241d00000400000000000000020000000000000001000000000000000100000000010000a100000000000000"], 0x678) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r10, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r10, &(0x7f0000008340)=ANY=[@ANYBLOB="78060000daffffff", @ANYRES64=r11, @ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000100008000000100010000000000000009000000000000000100000000000000ffffff7f0000000006000000000000000100000000000000e2c2000000010000250000000080010020000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="ff0700008a3c0000000000000500000000000000f8ffffffffffffff00000000ff7f00000500000000000000030000000000000063e0000000000000080000000000000004000000fffeffff00000000000000000300000000000000010000000000000009000000000000000900000000000000828b0000000000000000008008000000050000000040000000000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="000000000700000000000000060000000000000005000000000000000a000000eb0000002f6465762f6375736500000000000000040000000000000003000000000000000200000000000000070000000000000004000000db33ffff05000000000000001f0000000000000008000000000000000000000000000000080000000000000009000000000000000001000003000000ff0300000040000004000000", @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="8000000000040000000000000400000000000000060000000000000007000000070000005c2f213f2c2d5200060000000000000001000000000000005e03000000000000090000000000000008000000940000000400000000000000550000000000000005000000000000000100000000000000008000000000000004000000000000000800000001000080010400000080000007000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="040000001800000000000000000000000000000004000000000000000b000000b80a00007b24213a2f2726ce2b2121000000000004000000000000000000000000000000e9090000000000000500000000000000ff0700000738000001000000000000000300000000000000008000000000000005000000000000001f00000000000000ff00000000000000ef210000ff7f0000ff7f000000c0000001000000", @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="ffff000001040000000000000200000000000000cbe80000000000000a000000000100002f6465762f6375736500000000000000020000cfb62497cd890220736d73bbdbe400000000000000000000000000070000000000000001000000000000005c030000010000000000000000000000ff01000000000000c96f000000000000050000000000000007000000000000000000000000000000010400000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0600000006000000000000000000000000000000000400000000000010000000be0000002f6465762f696e7075742f6d696365000400000000000000030000000000000006000000000000000100000000000000080000000500000004000000000000000000000000000000994f0000000000003f000000000000000100000000000000530100000000000000000000001000000100ffff0040000003000000", @ANYRES32=r14, @ANYRES32=r13, @ANYBLOB="06000000ffffffff00000000030000000000000006000000000000000400000080ffffff2628292f000000000400000000000000020000000000000093668d1800000000e72a00000000000002000000000000020000000000000000d200000000000000030000000000000002000000000000000600000000000000f7ffffffffffffff060000000400000004000000006000007c0f0000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="00000000e1040000000000000300000000000000ef0000000000000010000000010000002f6465762f696e7075742f6d69636500050000000000000003000000000000007f000000000000004200000000000000ff7f000001040000040000000000000000020000000000000500000000000000750000000000000000000000000000007e0000000000000006000000ff0300000600000000c0000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b002000004000000000000000600000000000000ff0700000000000010000000030000002f6465762f696e7075742f6d69636500040000000000000002000000000000000100000000000000020000000000000006000000f9ffffff02000000000000000000000000000000ffffff7f0000000005000000000000000000000001000000ff000000000000003b08000001000000000001000000000001040000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="241d00000400000000000000020000000000000001000000000000000100000000010000a100000000000000"], 0x678) r15 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r15, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r15, &(0x7f0000008340)={0x678, 0x0, r16, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r17, r18, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r17, r18, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r18, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x2, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r17, r18, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r18, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r17, r18, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r19, r18, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r17, r18, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x837, 0x1, 0x10000, 0x0, 0x401, r17, r18, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) r20 = getuid() write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000006100)={0x3d0, 0x0, r1, [{{0x6, 0x1, 0x2, 0x6, 0x5, 0x1, {0x4, 0x101, 0x20, 0x9b, 0x5, 0x8, 0x6, 0x10001, 0x0, 0x8000, 0x4e2, 0xee01, 0xee00, 0x3, 0x85}}, {0x1, 0xbab, 0x1, 0x7f, '\x00'}}, {{0x6, 0x1, 0x3, 0x4, 0x80, 0x3f, {0x4, 0x20, 0x1, 0x20c, 0x6, 0x401, 0x3, 0x43, 0x6, 0x1000, 0x9, r2, r3, 0xffffffc1, 0x7}}, {0x2, 0x1ff, 0x1, 0x6, '\x00'}}, {{0x0, 0x3, 0x800, 0x5, 0x20, 0xee, {0x6, 0x3, 0x100000000, 0x9, 0x9, 0xfffffffffffffffe, 0x4, 0xff, 0x10001, 0xc000, 0x200, r6, 0xee01, 0x40, 0x5}}, {0x6, 0xffffffff, 0x1, 0x81, '\x00'}}, {{0x1, 0x2, 0xffffffffffffff25, 0x4, 0x7, 0x2, {0x3, 0x200, 0x9a, 0x80000001, 0x6c6, 0x81, 0x401, 0x7fffffff, 0x1000, 0x4000, 0x3, r9, 0xee01, 0x100, 0x2}}, {0x4, 0x4, 0x1, 0x8000, '\x00'}}, {{0x0, 0x2, 0x7a1, 0x0, 0x511, 0x3, {0x5, 0x4, 0x1, 0x6, 0xdaa1, 0x0, 0x2, 0x2, 0x9, 0x2000, 0x80, r12, r18, 0x80000001, 0x100}}, {0x2, 0x9, 0x5, 0x6, '%*{[-'}}, {{0x3, 0x2, 0x5, 0x400, 0x4, 0x5, {0x3, 0x63c1, 0x1, 0x1, 0x8000, 0xff, 0xed6, 0xcf, 0xa29, 0x8000, 0x7f, r20, 0xee01, 0x200, 0x3}}, {0x4, 0x2, 0x1, 0x6, '\x00'}}]}, 0x3d0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:06 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x6}, 0x20) 06:34:06 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f00000005c0)={0x28, 0x0, r4, {{0x9, 0x9}}}, 0x28) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000002c0)=0x20) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20044005) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:06 executing program 4: r0 = socket(0xa, 0x3, 0x2) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @remote, 0x7, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x227}, @alu={0x4, 0x0, 0xa, 0x3, 0x3, 0x6, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x2b, 0xf0, &(0x7f0000000100)=""/240, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x4, 0x6c}, 0x10, 0x107fa}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) 06:34:06 executing program 1: r0 = socket(0xa, 0x3, 0xaaa) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:06 executing program 3: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000040)=""/92) r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x20) 06:34:06 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6, 0x6}, 0x20) 06:34:06 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f00000005c0)={0x28, 0x0, r4, {{0x9, 0x9}}}, 0x28) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000002c0)=0x20) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20044005) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:06 executing program 5: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:06 executing program 4: r0 = socket(0xa, 0x3, 0x2) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @remote, 0x7, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x227}, @alu={0x4, 0x0, 0xa, 0x3, 0x3, 0x6, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x2b, 0xf0, &(0x7f0000000100)=""/240, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x4, 0x6c}, 0x10, 0x107fa}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) 06:34:06 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f00000005c0)={0x28, 0x0, r4, {{0x9, 0x9}}}, 0x28) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000002c0)=0x20) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20044005) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:06 executing program 2: r0 = socket(0xa, 0x3, 0x3) r1 = fork() write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0xc4ad3a92b491cd3b, 0x0, {{0x1ff, 0x80000000, 0x2, r1}}}, 0x28) clock_getres(0x4, &(0x7f0000000040)) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000080)) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 06:34:06 executing program 1: r0 = socket(0xa, 0x3, 0x3) r1 = socket(0xa, 0x1, 0x80000001) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x802010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x140c, 0x200, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c011}, 0x4000000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000040)='0', 0x1) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x20) gettid() r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x3, @remote, 0x4e, 0x1}, 0x20) 06:34:06 executing program 4: r0 = socket(0xa, 0x3, 0x2) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @remote, 0x7, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x227}, @alu={0x4, 0x0, 0xa, 0x3, 0x3, 0x6, 0xfffffffffffffffc}], &(0x7f00000000c0)='GPL\x00', 0x2b, 0xf0, &(0x7f0000000100)=""/240, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x4, 0x6c}, 0x10, 0x107fa}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r1}, 0x10) 06:34:06 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x20, 0x1406, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4844}, 0x20000000) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)={0x2}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:06 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f00000005c0)={0x28, 0x0, r4, {{0x9, 0x9}}}, 0x28) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) getsockname$l2tp6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000002c0)=0x20) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x1) 06:34:06 executing program 2: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000040)=""/92) r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x20) 06:34:06 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x200040, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0xa}}, 0x20) 06:34:06 executing program 5: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:06 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x33}, 0x20) 06:34:06 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x20401, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000005c0)={@none, 0x3ff, 0x3, 0xb8a6, 0x40, 0x3, "f58d6486529236c928ae5300db4f5a92627662f4a77d0dcc8265d6d088825329ff52ac0ee213b609301dea37d82b24603a004bce7a7548618f261386100e86bc62e57763ef1786dd9c401bb517aae84525c5d00521836aad17e04cb62fa64803f262e7f4f9155b62beeac0742ad9e15edfa35222ca5b92ad38af62939c293660"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250400000005000dd389b4ff00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/216, 0xd8}], 0x1, &(0x7f0000000540)=""/51, 0x33}, 0x40000000) r3 = syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080025bd7000fddbdf2506000000080011000000000005000d000000000008000b0003000000f9461137e0ff00000500c0010000000000008635eb9a69fd989b4d79976578bc06001c001f000000"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) 06:34:07 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x10001, 0x34343459, 0x3, @stepwise={0x80000000, 0x200, 0x4000, 0x4b2963f, 0x40, 0x1}}) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) 06:34:07 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f00000005c0)={0x28, 0x0, r4, {{0x9, 0x9}}}, 0x28) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x1) 06:34:07 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000001340)={0x18, 0xfffffffffffffff5, 0x0, {0x146}}, 0x18) r1 = socket(0xa, 0x3, 0x3) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/236, 0xec}, {&(0x7f00000011c0)=""/128, 0x80}, {&(0x7f0000001240)=""/38, 0x26}], 0x4}, 0x10) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000013c0), 0x400002) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x5c, 0x1402, 0x4, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1000}, 0x20) 06:34:07 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1, 0x1, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x38, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @private=0xa010100]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', r0, 0x7800, 0x1, 0x2, 0x80000001, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@ssrr={0x89, 0x27, 0x94, [@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)={0x401, 0x3, 0x7, 0xca9a, 0x9, 0x5}) 06:34:07 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x12}, 0x20) 06:34:07 executing program 1: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1000}, 0x20) 06:34:07 executing program 5: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:07 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f00000005c0)={0x28, 0x0, r4, {{0x9, 0x9}}}, 0x28) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x1) 06:34:07 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1, 0x1, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x38, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @private=0xa010100]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', r0, 0x7800, 0x1, 0x2, 0x80000001, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@ssrr={0x89, 0x27, 0x94, [@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)={0x401, 0x3, 0x7, 0xca9a, 0x9, 0x5}) 06:34:07 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x20401, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000005c0)={@none, 0x3ff, 0x3, 0xb8a6, 0x40, 0x3, "f58d6486529236c928ae5300db4f5a92627662f4a77d0dcc8265d6d088825329ff52ac0ee213b609301dea37d82b24603a004bce7a7548618f261386100e86bc62e57763ef1786dd9c401bb517aae84525c5d00521836aad17e04cb62fa64803f262e7f4f9155b62beeac0742ad9e15edfa35222ca5b92ad38af62939c293660"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250400000005000dd389b4ff00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/216, 0xd8}], 0x1, &(0x7f0000000540)=""/51, 0x33}, 0x40000000) r3 = syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080025bd7000fddbdf2506000000080011000000000005000d000000000008000b0003000000f9461137e0ff00000500c0010000000000008635eb9a69fd989b4d79976578bc06001c001f000000"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) 06:34:07 executing program 1: r0 = socket(0xa, 0x3, 0x3) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x140b, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x5) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:07 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1, 0x1, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x38, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @private=0xa010100]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', r0, 0x7800, 0x1, 0x2, 0x80000001, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@ssrr={0x89, 0x27, 0x94, [@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)={0x401, 0x3, 0x7, 0xca9a, 0x9, 0x5}) 06:34:07 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f00000005c0)={0x28, 0x0, r4, {{0x9, 0x9}}}, 0x28) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000240)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x1) 06:34:07 executing program 5: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:07 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = getgid() write$FUSE_ENTRY(r0, &(0x7f0000004140)={0x90, 0x0, r1, {0x1, 0x0, 0x7, 0x2, 0x7f, 0x80000000, {0x3, 0x9, 0x80, 0x80000001, 0x10001, 0x5, 0x5, 0x4, 0xba1d, 0xc000, 0x40, r2, r3, 0x9, 0x8}}}, 0x90) getitimer(0x1, &(0x7f0000000080)) r4 = socket(0xa, 0x3, 0x3) connect$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:07 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r2, [{{0x9, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r3, r4, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x7f, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r3, r4, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x5, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x100000009, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r4, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r3, r4, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x20, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r4, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r3, r4, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r5, r4, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r3, r4, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x5, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x8000004, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r3, r4, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000240)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x5, 0x7, 0x80000000, 0x4238, {0x0, 0x6a1d, 0x446, 0x166, 0x2, 0x3, 0xf7f, 0x9, 0x6, 0x0, 0x0, 0xee00, r4, 0x7fffffff, 0x4}}, {0x0, 0x6}}}, 0xa0) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000000)=0x80) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1405, 0x400, 0x70bd26, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004080}, 0xc044) r7 = socket(0xa, 0x3, 0x3) bind$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:07 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1, 0x1, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x38, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @private=0xa010100]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', r0, 0x7800, 0x1, 0x2, 0x80000001, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@ssrr={0x89, 0x27, 0x94, [@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) 06:34:07 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f00000005c0)={0x28, 0x0, r4, {{0x9, 0x9}}}, 0x28) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x1) 06:34:07 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x20401, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000005c0)={@none, 0x3ff, 0x3, 0xb8a6, 0x40, 0x3, "f58d6486529236c928ae5300db4f5a92627662f4a77d0dcc8265d6d088825329ff52ac0ee213b609301dea37d82b24603a004bce7a7548618f261386100e86bc62e57763ef1786dd9c401bb517aae84525c5d00521836aad17e04cb62fa64803f262e7f4f9155b62beeac0742ad9e15edfa35222ca5b92ad38af62939c293660"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250400000005000dd389b4ff00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/216, 0xd8}], 0x1, &(0x7f0000000540)=""/51, 0x33}, 0x40000000) r3 = syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080025bd7000fddbdf2506000000080011000000000005000d000000000008000b0003000000f9461137e0ff00000500c0010000000000008635eb9a69fd989b4d79976578bc06001c001f000000"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) 06:34:07 executing program 5: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:08 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1, 0x1, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x38, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @private=0xa010100]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', r0, 0x7800, 0x1, 0x2, 0x80000001, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@ssrr={0x89, 0x27, 0x94, [@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:08 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x20401, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000005c0)={@none, 0x3ff, 0x3, 0xb8a6, 0x40, 0x3, "f58d6486529236c928ae5300db4f5a92627662f4a77d0dcc8265d6d088825329ff52ac0ee213b609301dea37d82b24603a004bce7a7548618f261386100e86bc62e57763ef1786dd9c401bb517aae84525c5d00521836aad17e04cb62fa64803f262e7f4f9155b62beeac0742ad9e15edfa35222ca5b92ad38af62939c293660"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250400000005000dd389b4ff00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/216, 0xd8}], 0x1, &(0x7f0000000540)=""/51, 0x33}, 0x40000000) r3 = syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080025bd7000fddbdf2506000000080011000000000005000d000000000008000b0003000000f9461137e0ff00000500c0010000000000008635eb9a69fd989b4d79976578bc06001c001f000000"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) 06:34:08 executing program 5: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1, 0x80000003}, 0x20) 06:34:08 executing program 1: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) connect$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x129, @mcast1, 0x7, 0x4}, 0x20) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x24004010) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x1410, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc4}, 0x40c4) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:08 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020}, 0x2020) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1) 06:34:08 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1, 0x1, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x38, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @private=0xa010100]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', r0, 0x7800, 0x1, 0x2, 0x80000001, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@ssrr={0x89, 0x27, 0x94, [@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:08 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:34:08 executing program 1: r0 = socket(0xa, 0x3, 0x3) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x0, {0xffffffff, 0x4, 0xfffffc01, 0x9}}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x20) 06:34:08 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x20401, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000005c0)={@none, 0x3ff, 0x3, 0xb8a6, 0x40, 0x3, "f58d6486529236c928ae5300db4f5a92627662f4a77d0dcc8265d6d088825329ff52ac0ee213b609301dea37d82b24603a004bce7a7548618f261386100e86bc62e57763ef1786dd9c401bb517aae84525c5d00521836aad17e04cb62fa64803f262e7f4f9155b62beeac0742ad9e15edfa35222ca5b92ad38af62939c293660"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250400000005000dd389b4ff00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)=""/216, 0xd8}], 0x1, &(0x7f0000000540)=""/51, 0x33}, 0x40000000) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 06:34:08 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000000380)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f00000001c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/81, 0x51}], 0x4}, 0x22) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:08 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1) 06:34:08 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1, 0x1, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x38, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @private=0xa010100]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', r0, 0x7800, 0x1, 0x2, 0x80000001, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@ssrr={0x89, 0x27, 0x94, [@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:08 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x20401, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000005c0)={@none, 0x3ff, 0x3, 0xb8a6, 0x40, 0x3, "f58d6486529236c928ae5300db4f5a92627662f4a77d0dcc8265d6d088825329ff52ac0ee213b609301dea37d82b24603a004bce7a7548618f261386100e86bc62e57763ef1786dd9c401bb517aae84525c5d00521836aad17e04cb62fa64803f262e7f4f9155b62beeac0742ad9e15edfa35222ca5b92ad38af62939c293660"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250400000005000dd389b4ff00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 06:34:08 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:34:08 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1) 06:34:08 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400203, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x1, [0x0]}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r2 = socket(0x1d, 0x80000, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000000c0)=""/251) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:08 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:34:08 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x20401, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000005c0)={@none, 0x3ff, 0x3, 0xb8a6, 0x40, 0x3, "f58d6486529236c928ae5300db4f5a92627662f4a77d0dcc8265d6d088825329ff52ac0ee213b609301dea37d82b24603a004bce7a7548618f261386100e86bc62e57763ef1786dd9c401bb517aae84525c5d00521836aad17e04cb62fa64803f262e7f4f9155b62beeac0742ad9e15edfa35222ca5b92ad38af62939c293660"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 06:34:08 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1, 0x1, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x38, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @private=0xa010100]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', r0, 0x7800, 0x1, 0x2, 0x80000001, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @remote, {[@ssrr={0x89, 0x27, 0x94, [@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:08 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000004c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x1) 06:34:08 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/145, 0x91}, {&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000000240)=""/152, 0x98}], 0x4, &(0x7f0000000340)=""/163, 0xa3}, 0x0) 06:34:09 executing program 3: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) socketpair(0x28, 0xa, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000002d40)=ANY=[@ANYBLOB="15000000e5a953705fb86a16e70966b34a1194b4a3c2d4e3c151163fc2c438c950a827c4e4c8e652556b25366980b1bfbc9f826be9f009c4235e795831316af64ef84e8af3a6676e58a2059ab69ff8086952ed3851c439e108c22f18fa09b305327e860e9f2fadc5114f624a0c04b5ed107517ab59447170109208c3cdc529922c6c5de05150446b70e4262d3c755f990fc41e82e68e157a00000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r2, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r3, r4, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r3, r4, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r4, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r3, r4, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r4, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r3, r4, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r5, r4, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r3, r4, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r3, r4, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x6, 0x1, 0x9, 0x1f, 0x0, 0x101, {0x1, 0x7, 0x69e, 0x0, 0x0, 0x800, 0xff, 0x3ff, 0x6, 0x4000, 0xe7f, r5, 0xee00, 0x400, 0xff}}}, 0x90) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r6, 0xc00464c9, &(0x7f0000000080)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r7, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r7, &(0x7f0000000180)={0x18, 0xfffffffffffffffe, r8, {0xfffffffffffffff9}}, 0x18) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r9, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000140)) 06:34:09 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x20401, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000005c0)={@none, 0x3ff, 0x3, 0xb8a6, 0x40, 0x3, "f58d6486529236c928ae5300db4f5a92627662f4a77d0dcc8265d6d088825329ff52ac0ee213b609301dea37d82b24603a004bce7a7548618f261386100e86bc62e57763ef1786dd9c401bb517aae84525c5d00521836aad17e04cb62fa64803f262e7f4f9155b62beeac0742ad9e15edfa35222ca5b92ad38af62939c293660"}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 06:34:09 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) 06:34:09 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1, 0x1, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x38, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @private=0xa010100]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:09 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000004c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x1) 06:34:09 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1, 0x1, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @ssrr={0x89, 0x13, 0x38, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3c}, @broadcast]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @private=0xa010100]}]}}}}}) r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:09 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000004c0)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:09 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x20401, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000005c0)={@none, 0x3ff, 0x3, 0xb8a6, 0x40, 0x3, "f58d6486529236c928ae5300db4f5a92627662f4a77d0dcc8265d6d088825329ff52ac0ee213b609301dea37d82b24603a004bce7a7548618f261386100e86bc62e57763ef1786dd9c401bb517aae84525c5d00521836aad17e04cb62fa64803f262e7f4f9155b62beeac0742ad9e15edfa35222ca5b92ad38af62939c293660"}) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 06:34:09 executing program 5: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000004c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=""/81, 0x51}, 0x1) write$FUSE_OPEN(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1) 06:34:09 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0xffffff7f, 0x7fff, 0x4}) r1 = socket(0xa, 0x3, 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x8, 0x7f, 0x0, 'queue0\x00', 0x63e}) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:09 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:09 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x1000, @mcast1}, 0x20) 06:34:09 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) getsockname(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000000c0)=0x80) 06:34:09 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000004c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:09 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) openat$autofs(0xffffffffffffff9c, &(0x7f0000000580), 0x20401, 0x0) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 06:34:09 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:09 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x40) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:09 executing program 2: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:09 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xd}, 0x20) 06:34:09 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 06:34:09 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{@none}, {@none}, {}]}) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0xa, 0x3, 0x3) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname(r2, &(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000002c0)=0x80) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:09 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) recvmsg(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/188, 0xbc}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x6, &(0x7f00000013c0)=""/216, 0xd8}, 0x40002020) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, 0x1406, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000902) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x30, 0x1404, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406) 06:34:09 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:09 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:09 executing program 4: r0 = socket(0xa, 0x3, 0x3) syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, r0) 06:34:09 executing program 1: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) 06:34:09 executing program 2: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:09 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0xfd78) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:09 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:09 executing program 4: syz_genetlink_get_family_id$l2tp(0xfffffffffffffffe, 0xffffffffffffffff) 06:34:09 executing program 3: r0 = socket(0x2, 0x5, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r2, &(0x7f0000000100)=@ipx, &(0x7f0000000180)=0x80) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/147) 06:34:09 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1412, 0x4, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x805}, 0x4000004) 06:34:09 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000200), 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:09 executing program 2: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:09 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:09 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x20) 06:34:10 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000080)={r1, r2/1000+60000}, 0x10) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:10 executing program 3: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1410, 0x2, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x44) socket(0xa, 0x3, 0x3) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xd297, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, 0x20) 06:34:10 executing program 0: getpeername(0xffffffffffffffff, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:10 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:10 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x20) 06:34:10 executing program 2: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:10 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000080)={r1, r2/1000+60000}, 0x10) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:10 executing program 3: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000079d7e6360368acd9f39845edb79a7076e8848bd2b14ebe472e271a1da28771d5a210f640fd6157f0170132a5ccff1d190c302b4c12c9ea9bd3641eb048115c063805e07a8ba906c7c3a6c724d650af2c9de3b324f963d0bed79015e2daa825d13bada4c39a8448d5388cd7a85c70701715eea6ee575f54c72b843254908e6400696fc67f153f7753bb847704f6e79e51bed44c962d9b505b6274723995a1d28f53117fd12f0eb1724692fe2babc4500d763de727aea389fa745fde4d378ab09f62466b9c19b65f8143460e814eea741a824bac71e7898f2a357d2c20011d1fbc11a5e823886bafd1fc6509ea26b7830b40da7c590bc240171777c6d4466d261b43d4ff5d597fcffeeef222a0df3ae31e18a25cc0c564c520c231d232d9971676b4d2e8e4b7a50f06dd97d3d4f752a40f18fa6069789080040b6d5f218942", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf2504000000050006000600000008000c0000000000060001000b00000005001200000000000600010004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80000}, 0x8000) r0 = socket(0x28, 0x3, 0x6) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000040)=0xfff) 06:34:10 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000080)={r1, r2/1000+60000}, 0x10) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:10 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x8}, 0x20) 06:34:10 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:10 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) clock_gettime(0x0, &(0x7f0000000040)) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:10 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) getsockname(r0, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80) 06:34:10 executing program 5: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:10 executing program 2: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:10 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000080)={r1, r2/1000+60000}, 0x10) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:10 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40008c1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x9}, 0x20) getpeername(0xffffffffffffffff, &(0x7f0000000180)=@pppoe, &(0x7f0000000200)=0x80) 06:34:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:10 executing program 5: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:10 executing program 2: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:10 executing program 3: socket(0xa, 0x3, 0x3) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x242, 0x0) recvmsg$can_bcm(r0, &(0x7f0000003840)={&(0x7f0000002540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003780)=[{&(0x7f00000025c0)=""/243, 0xf3}, {&(0x7f00000026c0)=""/114, 0x72}, {&(0x7f0000002740)=""/7, 0x7}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x4, &(0x7f00000037c0)=""/118, 0x76}, 0x2061) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000780)={&(0x7f0000000080)=@x25, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000180)=""/31, 0x1f}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000340)=""/131, 0x83}, {&(0x7f0000000400)=""/184, 0xb8}, {&(0x7f00000004c0)=""/145, 0x91}, {&(0x7f0000000580)=""/189, 0xbd}], 0xa, &(0x7f0000000700)=""/71, 0x47}, 0x10000) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5, 0xffffffff}, 0x81) 06:34:10 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) getsockname(r0, &(0x7f0000000040)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80) 06:34:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:10 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:10 executing program 5: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:10 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x20) 06:34:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:10 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:10 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @vbi={0x5, 0x33, 0x7, 0x38414261, [0x3, 0x506], [0x5, 0x80000000], 0x1}}) getsockname$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000180)=0x20) 06:34:10 executing program 2: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:10 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x9}, 0x6}, 0x20) 06:34:10 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:10 executing program 5: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:10 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:10 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x9}, 0x6}, 0x20) 06:34:10 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000000040)) 06:34:10 executing program 5: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:10 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:10 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:10 executing program 2: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:10 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x9}, 0x6}, 0x20) 06:34:10 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x8a1}, 0x20) 06:34:11 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:11 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:11 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:11 executing program 5: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:11 executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:11 executing program 2: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:11 executing program 3: r0 = socket(0x8, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f}, 0x20) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7ff8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ff}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 06:34:11 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:11 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x20) 06:34:11 executing program 5: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:11 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:11 executing program 2: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:11 executing program 1: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:11 executing program 3: r0 = socket(0x22, 0x4, 0x5) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getpeername(r1, &(0x7f0000000040)=@rc={0x1f, @none}, &(0x7f00000000c0)=0x80) 06:34:11 executing program 2: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:11 executing program 5: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:11 executing program 4: r0 = socket(0x8, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f}, 0x20) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7ff8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7ff}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 06:34:11 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:11 executing program 1: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:11 executing program 3: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x81) 06:34:11 executing program 2: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x20) 06:34:11 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0xfec0}, 0x20) 06:34:11 executing program 0: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:11 executing program 5: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:11 executing program 1: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:11 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) 06:34:11 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000000, @dev, 0x6}, 0x20) 06:34:11 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:34:11 executing program 0: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:11 executing program 3: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:11 executing program 1: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:11 executing program 5: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:11 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:34:11 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000000, @dev, 0x6}, 0x20) 06:34:11 executing program 0: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:11 executing program 3: r0 = socket(0x1d, 0x3, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x1f, 0x81, 0x3, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x80, 0x8, 0xfffffff7, 0x6}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d18, &(0x7f0000000140)) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000100)=0x13) 06:34:11 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:34:11 executing program 1: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:11 executing program 0: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:11 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000000, @dev, 0x6}, 0x20) 06:34:11 executing program 5: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) [ 3043.071336] can: request_module (can-proto-3) failed. 06:34:11 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3043.106545] can: request_module (can-proto-3) failed. 06:34:11 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) 06:34:11 executing program 0: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:12 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x40) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000400000000000000ffffff7f94ffffb2eccb459ffffc0000009500000000000000183500000100000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x6a, &(0x7f0000000140)=""/106, 0x40f00, 0x15, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x1, 0x0, 0x1b2f4900}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ata_eh_link_autopsy\x00'}, 0x10) 06:34:12 executing program 1: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:12 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10, @empty}, 0x20) 06:34:12 executing program 5: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:12 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000300)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/142, 0x8e}, {&(0x7f0000000280)=""/40, 0x28}], 0x3}, 0x2000) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:12 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @dev, 0x6}, 0x20) 06:34:12 executing program 0: r0 = socket(0x0, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:12 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xff00, 0x0, @empty}, 0x20) 06:34:12 executing program 1: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:12 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @dev, 0x6}, 0x20) 06:34:12 executing program 0: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:12 executing program 2: r0 = socket(0x1d, 0x4, 0x0) connect$can_bcm(r0, &(0x7f0000000000)={0xa}, 0x6e) 06:34:12 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) write$sndseq(r1, &(0x7f0000000140)=[{0x3, 0xfc, 0x8, 0x4, @time={0xcb56, 0x5c03}, {0x8, 0xff}, {0xd9, 0xff}, @ext={0x56, &(0x7f00000000c0)="ef9c8ba2c1c2a702417bfb26f2f4c4d9e3cda62374718dc21f0264cc58cfbc1e04bf87133941be9cfd0f92b54eeaecbe46dc31864989ab9a919f580a4d465070832c2dc22d97c91e5239b86fb573993ca8c8cd0c27af"}}], 0x1c) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040)={r2, r3/1000+60000}, 0x10) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@none, 0x4}) 06:34:12 executing program 5: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:12 executing program 4: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @dev, 0x6}, 0x20) [ 3043.517813] can: request_module (can-proto-0) failed. 06:34:12 executing program 2: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x80fe, 0x0, @empty}, 0x20) 06:34:12 executing program 3: r0 = socket(0xa, 0x3, 0x3) getitimer(0x0, &(0x7f0000000000)) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x8, @dev, 0x6}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x27, 0xa, 0x6) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="c692461b462e7824b87f35db9760000000798f33ddc281040000005768f014c398b6e81f06d463cddf7e9df8000000000000000000", @ANYRES16=0x0, @ANYBLOB="040025bd7000fcdbdf2506000000050005000000000008001800ac1414bb0c0010000600001000000000050012000100000006001a004e2400000500210001000000080008001100000000000500130005000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) 06:34:12 executing program 1: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:12 executing program 0: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:12 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:12 executing program 4: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:12 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x8, 0x0, @dev, 0x6}, 0x20) 06:34:12 executing program 3: r0 = socket(0xa, 0x3, 0x3) recvmsg(r0, &(0x7f0000001300)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/231, 0xe7}], 0x2, &(0x7f0000001200)=""/245, 0xf5}, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:12 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x8, 0x0, @dev, 0x6}, 0x20) 06:34:12 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:12 executing program 4 (fault-call:1 fault-nth:0): r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:12 executing program 0: r0 = socket(0xa, 0x0, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:12 executing program 1: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:12 executing program 2: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x8, 0x0, @dev, 0x6}, 0x20) 06:34:12 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:12 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:12 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:12 executing program 2 (fault-call:1 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:12 executing program 0: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:13 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:13 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:13 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:13 executing program 0: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:13 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) connect$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x8, @empty, 0x7ff, 0x4}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', r3, 0x29, 0xff, 0x5, 0x3, 0x3, @mcast2, @mcast1, 0x40, 0x8, 0x2, 0x3}}) 06:34:13 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xfc, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x2, 0x1) 06:34:13 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:13 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:13 executing program 0: r0 = socket(0xa, 0x3, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:13 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{0xff}, 'port1\x00', 0x94, 0x20000, 0x1, 0x7, 0xffffffff, 0x0, 0x210000, 0x0, 0x3, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000200)={0x2, 0x1, {0x2, 0x1, 0x0, 0x0, 0x3}, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000280)={{0xff, 0x40}, 0x1, 0xfff, 0x8000, {0x3, 0x4}, 0x4, 0xff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r2 = socket(0xa, 0x3, 0x3) connect$can_bcm(0xffffffffffffffff, &(0x7f00000001c0), 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000040)) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x20) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x40) write$vhost_msg_v2(r4, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000340)=""/174, 0xae, &(0x7f0000000400)=""/187, 0x1}}, 0x48) 06:34:13 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x80fe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:13 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:13 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:13 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xc0fe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:13 executing program 3: r0 = socket(0xa, 0x3, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x1006}, 0x20) 06:34:13 executing program 0: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:13 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:13 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:13 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xfc00, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0x1) 06:34:13 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:13 executing program 0: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:13 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000c1) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10001, @local, 0x6}, 0x62) 06:34:14 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xfe80, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5421, 0x1) 06:34:14 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0xc001, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000180)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1410, 0x8, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x8000) 06:34:14 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:14 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:14 executing program 0: socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4, 0x2}, 0x20) 06:34:14 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xfec0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5450, 0x1) 06:34:14 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:14 executing program 3: r0 = socket(0xa, 0x3, 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x7fffffff, 0x3, 0x80000001}, 0x9}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:14 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:14 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:34:14 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0xff00, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5451, 0x1) 06:34:14 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:14 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001040)={r1, r2, 0x3, 0x1000, &(0x7f0000000040)="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", 0x7f, 0x2, 0x5, 0x6, 0x2, 0x0, 0x4, 'syz1\x00'}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:14 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:34:14 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:14 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5452, 0x1) 06:34:14 executing program 3: r0 = socket(0x5, 0x4, 0x20000007) recvmsg$can_bcm(r0, &(0x7f0000000600)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f00000000c0)=""/238, 0xee}, {&(0x7f00000001c0)=""/186, 0xba}, {&(0x7f0000000280)=""/113, 0x71}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000380)=""/223, 0xdf}], 0x6, &(0x7f0000000500)=""/244, 0xf4}, 0x40004040) socketpair(0x29, 0x2, 0x5, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, 0x1409, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x40001) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000640)) 06:34:14 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:14 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:14 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, 0x0, 0x0) 06:34:14 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfc, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5460, 0x1) 06:34:14 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:14 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x20) 06:34:14 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40049409, 0x1) 06:34:14 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x80fe, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:14 executing program 3: r0 = socket(0xa, 0x4, 0x1000004) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x400000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000b14080026bd7000fcdbdf2508003f000500000008003f000300000008000300abc7718cdfdb29dfb8078ca10000000008000300030000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f00000000c0)=0x72) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='wbt_lat\x00', r1}, 0x10) 06:34:14 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:14 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x20) 06:34:14 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, 0x0, 0x0) 06:34:14 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xc0fe, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4020940d, 0x1) 06:34:15 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1403, 0x4, 0x70bd2b, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x8) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1406, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x85}, 0xa0c0) 06:34:15 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:15 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x20) 06:34:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x1) 06:34:15 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, 0x0, 0x0) 06:34:15 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfc00, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:15 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000040)) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:15 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:15 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, 0x0, 0x0) 06:34:15 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x20) 06:34:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x1) 06:34:15 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfe80, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:15 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(r0, 0x0, 0x0) 06:34:15 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:15 executing program 3: ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1405, 0x400, 0x70bd2d, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r0 = socket(0xa, 0x3, 0x3) socketpair(0x2b, 0x5, 0x5, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1402, 0x200, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0xa8cae56db09526ed}, 0x5) r2 = socket(0x1f, 0x6, 0x100) getpeername$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x6) 06:34:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0189436, 0x1) 06:34:15 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:15 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfec0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:15 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) 06:34:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc020660b, 0x1) 06:34:15 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(r0, 0x0, 0x0) 06:34:15 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0xb, 0x5, 0x3) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x20) 06:34:15 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x20) bind$l2tp6(r0, 0x0, 0x0) 06:34:15 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xff00, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) 06:34:15 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:15 executing program 3: r0 = socket(0xa, 0xa, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:15 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(r0, 0x0, 0x0) 06:34:15 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfc000000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:15 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, 0x20) 06:34:15 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:15 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) 06:34:15 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3, 0x4}, 0x20) 06:34:15 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfe800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:15 executing program 0: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(r0, 0x0, 0x0) 06:34:16 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) 06:34:16 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfec00000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:16 executing program 3: r0 = socket(0xa, 0x3, 0x3) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x6, 0xe3, &(0x7f0000000080)="fc0a79822d08d50a20ecf7a3c52713f192b352f08bc0fa2b2350b6cb936e8e4ef6d82b8b5079c89880d4c62e1f468e44a29d16383e20e4a898f9c5605e6927ce0147773f85eedf15768637301355359e29f010477921cc0e3d196815691494b15a2e9d66d3993263ea2b433c017daacff2dd232adfceb867218bf775bf9125717d4057f2d1fc9bd8db165d14126405852fcfd6c7d189bf53f3ec72ebc4d6926c59700b730ce65b311d3f486cee5729c32987c248dbca2c978c78f7f34479085830773c47e4cb16d2590df7efa1d029ba4254e35cb4be3e0c723cfbd4a28cbf631aabf3", 0x0, 0x80, 0x4, 0xb9, 0x6, 0x2, 0x2, 'syz0\x00'}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1e3840, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) 06:34:16 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x20) 06:34:16 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xff000000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:16 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:16 executing program 3: r0 = socket(0x18, 0x3, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000a80)={'syztnl2\x00', &(0x7f0000000a00)={'syztnl2\x00', r3, 0x29, 0x3, 0x1, 0x4, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7800, 0x40, 0x1000, 0xe13}}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x800) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r6, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r6, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r7}, 0x78) write$FUSE_STATFS(r5, &(0x7f0000000200)={0x60, 0xfffffffffffffffe, r7, {{0x5, 0x0, 0x6, 0x100, 0x4e, 0x401, 0x9, 0x8}}}, 0x60) write$FUSE_OPEN(r4, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000080)={0x9, 0x2, 0x4, 0x1000, 0x5, {r8, r9/1000+60000}, {0x5, 0x1, 0x81, 0x0, 0x7, 0x74, "680f89eb"}, 0xd18a, 0x2, @offset=0xe720, 0x12c}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:16 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) 06:34:16 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x20) 06:34:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200002) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000040)=0x3f) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 06:34:16 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:16 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x20) 06:34:16 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x20) 06:34:16 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:16 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xae, 0x7, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x7800, 0x80, 0x8, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x29, 0x3f, 0x7f, 0xfcb, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x20, 0x7, 0x7}}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1404, 0x4, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}}, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001014040928bd7000fedbdf25080015000008000008004c000100000008004c0001000000a3783260532f389333e936bb05ea6bed002eb6f9150f97ac43fc878b177b689d524be22ec08834213670b7e32683b6a4a7b7afeeaf93c2cab416c9c12ffcb5076b681142bdaa2ac821e7e04f9d4e4454a6f26f7fffa698aea15124110a87d627ab5990d8bdb23e870a8f"], 0x28}, 0x1, 0x0, 0x0, 0x48004}, 0x40) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000140)={0x1, [0x0]}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x1404, 0x300, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x4004000) 06:34:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x80000001, 0x0, 0x7, 0x8c, 0xffffffe0, 0x4}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x5, 0x50313134, 0x3, @discrete={0x1, 0x7}}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000100)={0x77359400}, 0x10) 06:34:16 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:16 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:16 executing program 1: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x20) 06:34:16 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfc}, 0x20) 06:34:16 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x7, 0x4, 0x81, {0x9, 0x6}, 0x1, 0xf034}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:16 executing program 1: r0 = socket(0xa, 0x3, 0x3) recvmsg(r0, &(0x7f0000001300)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/231, 0xe7}], 0x2, &(0x7f0000001200)=""/245, 0xf5}, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:16 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r1) getpeername$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x76) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x48942, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) 06:34:16 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x80fe}, 0x20) 06:34:16 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:16 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20c280, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 06:34:16 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:16 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xc0fe}, 0x20) 06:34:16 executing program 3: r0 = socket(0x35, 0x4, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) getsockname$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:16 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) 06:34:16 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfc00}, 0x20) 06:34:17 executing program 1: r0 = socket(0xa, 0x3, 0x3) recvmsg(r0, &(0x7f0000001300)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/231, 0xe7}], 0x2, &(0x7f0000001200)=""/245, 0xf5}, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:17 executing program 5: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x1) 06:34:17 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d08, &(0x7f00000002c0)=0x34) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:17 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:17 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfe80}, 0x20) 06:34:17 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000003e40)={0x18, 0x0, r2, {0x6}}, 0x18) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000002dc0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000002e40)=""/4096) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$getownex(r4, 0x10, &(0x7f0000002680)) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f00000026c0)=ANY=[@ANYBLOB="78060000daffffff", @ANYRES64=r5, @ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000100008000000100010000000000000009000000000000000100000000000000ffffff7f0000000006000000000000000100000000000000e2c2000000010000250000000080010020000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="ff0700008a3c0000000000000500000000000000f8ffffffffffffff00000000ff7f00000500000000000000030000000000000063e0000000000000080000000000000004000000fffeffff00000000000000000300000000000000010000000000000009000000000000000900000000000000828b0000000000000000008008000000050000000040000000000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000000700000000000000060000000000000005000000000000000a000000eb0000002f6465762f6375736500000000000000040000000000000003000000000000000200000000000000070000000000000004000000db33ffff05000000000000001f0000000000000008000000000000000000000000000000080000000000000009000000000000000001000003000000ff0300000040000004000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="8000000000040000000000000400000000000000060000000000000007000000070000005c2f213f2c2d5200060000000000000001000000000000005e03000000000000090000000000000008000000940000000400000000000000550000000000000005000000000000000100000000000000008000000000000004000000000000000800000001000080010400000080000007000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="040000001800000000000000000000000000000004000000000000000b000000b80a00007b24213a2f2726ce2b2121000000000004000000000000000000000000000000e9090000000000000500000000000000ff0700000738000001000000000000000300000000000000008000000000000005000000000000001f00000000000000ff00000000000000ef210000ff7f0000ff7f000000c0000001000000a43a6e07a2ca71f0c05688280b651e20fb24a941d8409a3e277e3e6548ece9a730fe12662b5365d7691a5d9d55aa03b3ca237648614d7b38b9ea1f184b316cba0a22bb9d4acfa88c4c82fbc5ed9f0349d7fc92e638066859a7bfdc220855feef9eab6cbb630048425a32e27c431550e2611e2b", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="ffff000001040000000000000200000000000000cbe80000000000000a000000000100002f6465762f637573650000000000000002000000000000000000000000000000070000000000000001000000000000005c030000010000000000000000000000ff01000000000000c96f0000000000000500000000000000070000000000000000000000000000000104000000000000010001000030000007000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0600000006000000000000000000000000000000000400000000000010000000be0000002f6465762f696e7075742f6d696365000400000000000000030000000000000006000000000000000100000000000000080000000500000004000000000000000000000000000000994f0000000000003f000000000000000100000000000000530100000000000000000000001000000100ffff0040000003000000", @ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="06000000ffffffff00000000030000000000000006000000000000000400000080ffffff2628292f000000000400000000000000020000000000000093668d1800000000e72a00000000000002000000000000020000000000000000d200000000000000030000000000000002000000000000000600000000000000f7ffffffffffffff060000000400000004000000006000007c0f0000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="00000000e1040000000000000300000000000000ef0000000000000010000000010000002f6465762f696e7075742f6d69636500050000000000000003000000000000007f000000000000004200000000000000ff7f000001040000040000000000000000020000000000000500000000000000750000000000000000000000000000007e0000000000000006000000ff0300000600000000c0000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b002000004000000000000000600000000000000ff0700000000000010000000030000002f6465762f696e7075742f6d69636500040000000000000002000000000000000100000000000000020000000000000006000000f9ffffff02000000000000000000000000000000ffffff7f0000000005000000000000000000000001000000ff000000000000003b08000001000000000001000000000001040000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="241d00000400000000000000020000000000000001000000000000000100000000010000a100000000000000"], 0x678) clock_gettime(0x0, &(0x7f0000003e80)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000003ec0)={0x1, 0x0, 0x4, 0x400, 0x4, {r9, r10/1000+60000}, {0x1, 0x0, 0x8, 0x1, 0x6, 0x0, "13b1c5b7"}, 0x1f, 0x2, @offset=0x3, 0x2, 0x0, r1}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000040)={0xb8, 0x0, r3, [{{0x4, 0x0, 0x5, 0xdc00, 0x101, 0x921, {0x4, 0x10000, 0x3, 0x6, 0x4, 0x100000001, 0x400, 0x2, 0x1, 0x9000, 0x101, r6, 0xee01, 0x9, 0x8}}, {0x4, 0x0, 0xa, 0xffff, ')(&{.]{!^&'}}]}, 0xb8) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, 0x1) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x80) 06:34:17 executing program 5: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x1) 06:34:17 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:17 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x696480, 0x0) 06:34:17 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfec0}, 0x20) 06:34:17 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4148b0a8d77f9d67) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000080)={@none, 0xc1, 0x7, 0x1, 0xfffb, 0x20, "bb7c53a2a79550c9023e49c6576008269afd7711ed30a5a9c7a45cd5ad295d980cb0e09248845da64a2a78a6738214cb6c7bf862bef7292da25844f177e30d5eda3d5b4108b1a28ff71185ea736d1944a13a3a3ea35bab74509c4f14eb5ab16f86ca73abb8f8f9ed81d04b87e5afe9aa4c614bfd24226a79df7841abb3b95e71"}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r1, 0x80044dfd, &(0x7f0000000140)) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:17 executing program 5: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x1) 06:34:18 executing program 1: r0 = socket(0xa, 0x3, 0x3) recvmsg(r0, &(0x7f0000001300)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/231, 0xe7}], 0x2, &(0x7f0000001200)=""/245, 0xf5}, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:18 executing program 2: getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x20) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000100)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) bind$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x7f, @empty, 0x8, 0x1}, 0x20) 06:34:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:18 executing program 3: r0 = socket(0xa, 0x4, 0x6) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) recvmsg(r2, &(0x7f0000002800)={&(0x7f0000002480)=@ipx, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002500)=""/205, 0xcd}, {&(0x7f0000002600)=""/196, 0xc4}, {&(0x7f0000002700)=""/137, 0x89}], 0x3, &(0x7f00000027c0)=""/8, 0x8}, 0x40000101) write$FUSE_OPEN(r1, 0x0, 0x0) recvmsg$can_bcm(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/159, 0x9f}, {&(0x7f0000001100)=""/183, 0xb7}, {&(0x7f00000011c0)=""/95, 0x5f}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/120, 0x78}, {&(0x7f00000022c0)}, {&(0x7f0000002300)=""/80, 0x50}], 0x8, &(0x7f0000002400)=""/46, 0x2e}, 0x10000) 06:34:18 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xff00}, 0x20) 06:34:18 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:18 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfc000000}, 0x20) 06:34:18 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:18 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:18 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 06:34:18 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfe800000}, 0x20) 06:34:18 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:19 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) 06:34:19 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:19 executing program 3: socket(0xa, 0xa, 0x3) r0 = socket(0x9, 0x3, 0x7) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000040)) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:19 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x1) 06:34:19 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfec00000}, 0x20) 06:34:19 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:19 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:19 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x1) 06:34:19 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xff000000}, 0x20) 06:34:19 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f00000020c0)=ANY=[@ANYBLOB="78060000daffffff", @ANYRES64=r3, @ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000100008000000100010000000000000009000000000000000100000000000000ffffff7f0000000006000000000000000100000000000000e2c2000000010000250000000080010020000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="ff070000de2a0da3a92b1032ff00000000ff7f00000500000000000500000000000000000063e0000000000000080000000000000004000000fffeffff00000000000000000300000000000000010000000000000009000000000000000900007304000000828b0000000000000000028008000000030000000040000000fe06c5673aab8c2d04630000001800000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="000000000700000000000000060000000000000005000000000000000a000000eb0000002f6465762f6375736500000000000000040000000000000003000000000000000200000000000000070000000000000004000000db33ffff05000000000000001f0000000000000008000000000000000000000000000000080000000000000009000000000000000001000003000000ff0300000040000004000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="8000000000040000000000000400000000000000060000000000000007000000070000005c2f213f2c2d5200060000000000000001000000000000005e03000000000000090000000000000008000000940000000400000000000000550000000000000005000000000000000100000000000000008000000000000004000000000000000800000001000080010400000080000007000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="ffff000001040000000000000200000000000000cbe80000000000000a000000000100002f6465762f637573650000000000000002000000000000000000000000000000070000000000000001000000000000005c030000010000000000000000000000ff01000000000000c96f0000000000000500000000000000070000000000000000000000000000000104000000000000010001000030000007000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0600000006000000000000000000000000000000000400000000000010000000be0000002f6465762f696e7075742f6d696365000400000000000000030000000000000006000000000000000100000000000000080000000500000004000000000000000000000000000000994f0000000000003f000000000000000100000000000000530100000000000000000000001000000100ffff0040000003000000", @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="06000000ffffffff00000000030000000000000006000000000000000400000080ffffff2628292f000000000400000000000000020000000000000093668d1800000000e72a00000000000002000000000000020000000000000000d200000000000000030000000000000002000000000000000600000000000000f7ffffffffffffff060000000400000004000000006000007c0f0000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="00000000e1040000000000000300000000000000ef0000000000000010000000010000002f6465762f696e7075742f6d69636500050000000000000003000000000000007f000000000000004200000000000000ff7f000001040000040000000000000000020000000000000500000000000000750000000000000000000000000000007e0000000000000006000000ff0300000600000000c0000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b002000004000000000000000600000000000000ff0700000000000010000000030000002f6465762f696e7075742f6d69636500040000000000000002000000000000000100000000000000020000000000000006000000f9ffffff02000000000000000000000000000000ffffff7f0000000005000000000000000000000001000000ff000000000000003b08000001000000000001000000000001040000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="241d00000400000000000000020000000000000001000000000000000100000000010000a100000000000000"], 0x678) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r8, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r9, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r10, r11, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r10, r11, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r11, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r10, r11, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r11, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r10, r11, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r12, r11, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r10, r11, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r10, r11, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r13, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r13, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r14, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r15, r16, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r15, r16, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r16, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r15, r16, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r16, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r15, r16, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r17, r16, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r15, r16, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r15, r16, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) write$FUSE_ATTR(r7, &(0x7f0000002840)={0x78, 0x0, r3, {0x2, 0xffb, 0x0, {0x1, 0x10000, 0x0, 0x8, 0x5, 0x3f5, 0x1, 0x401, 0x2, 0xc000, 0x426, r10, r16, 0x1, 0xfff}}}, 0x78) write$FUSE_ATTR(r1, &(0x7f0000000040)={0x78, 0x0, 0x0, {0x200000000, 0x400, 0x0, {0x0, 0x0, 0x1, 0x4783, 0x1, 0x2, 0x1000, 0x7, 0x5, 0xa000, 0x80000001, r4, 0xee01, 0x288f, 0x3}}}, 0x78) 06:34:19 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) 06:34:19 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c80, 0x1) 06:34:19 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:19 executing program 3: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000008340)={0xb8, 0x0, r1, [{{}, {0x0, 0x0, 0xa, 0x0, '/dev/cuse\x00'}}]}, 0xb8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) 06:34:19 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:19 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000040)) 06:34:19 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:19 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xfc}, 0x20) 06:34:19 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:19 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) recvmsg(r0, &(0x7f0000000600)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/125, 0x7d}, {&(0x7f0000000440)=""/37, 0x25}, {&(0x7f0000000480)=""/12, 0xc}], 0x6, &(0x7f0000000540)=""/158, 0x9e}, 0x40000000) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x8, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x8800) 06:34:19 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:19 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x80fe}, 0x20) 06:34:19 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x161002, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) 06:34:19 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x7, 0x4, 0x81, {0x9, 0x6}, 0x1, 0xf034}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:19 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:19 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xc0fe}, 0x20) 06:34:19 executing program 5: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8000, @remote, 0x1000}, 0x20) connect$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x400, @mcast1, 0x3, 0x4}, 0x20) 06:34:19 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:20 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:20 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xfc00}, 0x20) 06:34:20 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:20 executing program 3: r0 = socket(0xa, 0x3, 0x3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x7f, 0x5, 0x8, 0x8, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x40, 0x80, 0x5, 0x9d}}) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}, 0x6, 0x4}, 0x20) 06:34:20 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:20 executing program 0 (fault-call:2 fault-nth:0): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:20 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xfe80}, 0x20) 06:34:20 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000040)={{0xf, 0x5c}, 'port1\x00', 0x1, 0x10, 0x16c96659, 0xb652, 0x9, 0x94, 0x2, 0x0, 0x7, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000280)={{0x9, 0xf2}, 'port0\x00', 0x81, 0x1000c, 0x6, 0xfffffe01, 0x4623, 0x1, 0x20, 0x0, 0x0, 0x9}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) write$sndseq(r1, &(0x7f0000000240)=[{0x3, 0x4, 0x1, 0x7f, @tick, {0x20, 0x2}, {0x7f, 0x3}, @ext={0x51, &(0x7f00000001c0)="fdcd82108adb07aa9c64459669aeb83b547cee090379871cac524e48c3d8d94687749cab99bbda9937fd792daa96cbedf9e2cc60a7ce738516a6eae0fe7c2d619e58a70abba30df487c320dddd7fe29e79"}}, {0xb8, 0x3, 0x4, 0x1, @time={0x3, 0x8}, {0xcf, 0x40}, {0x3, 0x5}, @control={0x8, 0x9a59, 0x7fffffff}}], 0x38) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x1) 06:34:20 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:20 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x200000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) r4 = getpgrp(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x222000, 0x0) sched_rr_get_interval(r4, &(0x7f00000000c0)) write$FUSE_LK(r2, &(0x7f0000000000)={0x28, 0x0, r3, {{0x4, 0x9, 0x0, r4}}}, 0x28) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400002) r5 = getpgrp(0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x42900, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r6, 0x4004510d, &(0x7f0000000140)=0x4) sched_rr_get_interval(r5, &(0x7f00000000c0)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) fork() [ 3051.984248] FAULT_INJECTION: forcing a failure. [ 3051.984248] name failslab, interval 1, probability 0, space 0, times 0 [ 3052.007187] CPU: 0 PID: 22629 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3052.015104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3052.024471] Call Trace: [ 3052.027075] dump_stack+0x1fc/0x2ef [ 3052.030718] should_fail.cold+0xa/0xf 06:34:20 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040)) 06:34:20 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x400d03) ioctl$SNDCTL_TMR_START(r1, 0x5402) [ 3052.034532] ? setup_fault_attr+0x200/0x200 [ 3052.038865] ? lock_acquire+0x170/0x3c0 [ 3052.042855] __should_failslab+0x115/0x180 [ 3052.047120] should_failslab+0x5/0x10 [ 3052.051024] kmem_cache_alloc_trace+0x284/0x380 [ 3052.055700] ? loop_queue_work+0x20c0/0x20c0 [ 3052.060125] loop_add+0x4e/0x8a0 [ 3052.063508] loop_control_ioctl+0x16c/0x480 [ 3052.067845] ? loop_lookup+0x1d0/0x1d0 [ 3052.071753] ? ksys_write+0x241/0x2a0 [ 3052.075563] ? loop_lookup+0x1d0/0x1d0 [ 3052.079459] do_vfs_ioctl+0xcdb/0x12e0 06:34:20 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000040)) [ 3052.083354] ? lock_downgrade+0x720/0x720 [ 3052.087509] ? check_preemption_disabled+0x41/0x280 [ 3052.092523] ? ioctl_preallocate+0x200/0x200 [ 3052.096938] ? __fget+0x356/0x510 [ 3052.100406] ? do_dup2+0x450/0x450 [ 3052.103956] ? vfs_write+0x393/0x540 [ 3052.107678] ? fput+0x2b/0x190 [ 3052.110886] ksys_ioctl+0x9b/0xc0 [ 3052.114346] __x64_sys_ioctl+0x6f/0xb0 [ 3052.118236] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3052.122822] do_syscall_64+0xf9/0x620 [ 3052.126637] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3052.131831] RIP: 0033:0x4665f9 06:34:20 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400001) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000001600)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/125, 0x7d}, {&(0x7f00000014c0)=""/210, 0xd2}], 0x5, &(0x7f00000015c0)=""/16, 0x10}, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'syztnl0\x00', r3, 0x20, 0x8000, 0x301, 0x9, {{0x26, 0x4, 0x1, 0x3, 0x98, 0x67, 0x0, 0x6c, 0x2f, 0x0, @private=0xa010102, @empty, {[@end, @cipso={0x86, 0x43, 0x3, [{0x7, 0xf, "2e9e37e955fbe4120c6e08a811"}, {0x2, 0xe, "71791fe511623415c2b2bffe"}, {0x0, 0x11, "aef90962adc46d02282c696ff2db6c"}, {0x6, 0xf, "96e9a0be654cf173e76d847797"}]}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x6, [0x8, 0x10001, 0x0, 0xe]}, @timestamp_addr={0x44, 0x2c, 0xcd, 0x1, 0xc, [{@empty}, {@rand_addr=0x64010102, 0x1}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@local, 0x1000}]}]}}}}}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:20 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r0, 0x7, 0x58, &(0x7f0000000040)="8efff653cbee8e855746b11d1995f4761c2be0460891236e3a6c033c44c9d4906992426d1d7a2d1a0620fad9f74177ae703cc98b5db13ce3ca50c4b33c4c596a16e7d5223755fc6850cd19ebdf83a93190203a3ceb532026", 0x0, 0x5, 0xf7c7, 0x1f, 0x0, 0x2, 0x2, 'syz1\x00'}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) [ 3052.135029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3052.153938] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3052.161659] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3052.168932] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3052.176210] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 06:34:21 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xfec0}, 0x20) [ 3052.183616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3052.190934] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:21 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:21 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1404, 0x200, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x814}, 0x80801) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:34:21 executing program 3: socket(0xa, 0x3, 0x3) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @private1, 0xfffffffe, 0xfffffffe}, 0x20) 06:34:21 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) 06:34:21 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:21 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1900, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) bind$l2tp6(r1, &(0x7f0000002c40)={0xa, 0x0, 0x0, @mcast1, 0x800, 0x4}, 0x20) 06:34:21 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xff00}, 0x20) 06:34:21 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x20) [ 3052.406306] FAULT_INJECTION: forcing a failure. [ 3052.406306] name failslab, interval 1, probability 0, space 0, times 0 [ 3052.434950] CPU: 0 PID: 22664 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3052.442866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3052.452225] Call Trace: 06:34:21 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x2, 0x1) [ 3052.454835] dump_stack+0x1fc/0x2ef [ 3052.458486] should_fail.cold+0xa/0xf [ 3052.462304] ? setup_fault_attr+0x200/0x200 [ 3052.466656] ? lock_acquire+0x170/0x3c0 [ 3052.470658] __should_failslab+0x115/0x180 [ 3052.474903] should_failslab+0x5/0x10 [ 3052.478797] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3052.483910] __kmalloc_node+0x38/0x70 [ 3052.487728] blk_mq_alloc_tag_set+0x330/0xa30 [ 3052.492243] loop_add+0x26d/0x8a0 [ 3052.495716] loop_control_ioctl+0x16c/0x480 [ 3052.500215] ? loop_lookup+0x1d0/0x1d0 06:34:21 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000040)) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{0x6, 0x1e}, 'port0\x00', 0x0, 0x71812, 0x0, 0xfffffff7, 0xffffff7f, 0x7f, 0x7ff, 0x0, 0x0, 0x3}) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r2 = socket(0x23, 0xa, 0x5) getsockname(r2, &(0x7f00000001c0)=@ipx, &(0x7f0000000240)=0x80) [ 3052.504288] ? ksys_write+0x241/0x2a0 [ 3052.508097] ? loop_lookup+0x1d0/0x1d0 [ 3052.512000] do_vfs_ioctl+0xcdb/0x12e0 [ 3052.515896] ? lock_downgrade+0x720/0x720 [ 3052.520056] ? check_preemption_disabled+0x41/0x280 [ 3052.525084] ? ioctl_preallocate+0x200/0x200 [ 3052.529509] ? __fget+0x356/0x510 [ 3052.532969] ? do_dup2+0x450/0x450 [ 3052.536512] ? vfs_write+0x393/0x540 [ 3052.540229] ? fput+0x2b/0x190 [ 3052.543434] ksys_ioctl+0x9b/0xc0 [ 3052.546894] __x64_sys_ioctl+0x6f/0xb0 [ 3052.550793] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3052.555386] do_syscall_64+0xf9/0x620 [ 3052.559201] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3052.564394] RIP: 0033:0x4665f9 [ 3052.567592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3052.586508] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3052.594229] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 06:34:21 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xfc000000}, 0x20) [ 3052.601511] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3052.608791] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3052.616071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3052.623351] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:21 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:21 executing program 5 (fault-call:1 fault-nth:2): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:21 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) 06:34:21 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x181080, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@any, 0x1}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:21 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x52a, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}]}, 0x5c}}, 0x2810) 06:34:21 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xfe800000}, 0x20) 06:34:21 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c82, 0x1) [ 3052.887392] FAULT_INJECTION: forcing a failure. [ 3052.887392] name failslab, interval 1, probability 0, space 0, times 0 [ 3052.899719] CPU: 1 PID: 22704 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3052.907795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3052.917153] Call Trace: [ 3052.919761] dump_stack+0x1fc/0x2ef [ 3052.923407] should_fail.cold+0xa/0xf [ 3052.927221] ? setup_fault_attr+0x200/0x200 [ 3052.931549] ? lock_acquire+0x170/0x3c0 06:34:21 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000022c0)) read$FUSE(r1, &(0x7f00000086c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r2}, 0x78) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, r2, {0x0, 0xc}}, 0x20) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002180), 0x200, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r7, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r7, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r8}, 0x78) write$FUSE_CREATE_OPEN(r6, &(0x7f00000021c0)={0xa0, 0xfffffffffffffffe, r8, {{0x6, 0x0, 0x7, 0x7, 0x3ea5, 0x6, {0x2, 0x3, 0x0, 0x3ff, 0x7ff, 0x8001, 0xf9a, 0x7ff, 0x7ff, 0xa000, 0x7, r3, r4, 0xa54, 0x3ff}}, {0x0, 0x8}}}, 0xa0) write$FUSE_OPEN(r5, 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000020c0), 0x4, 0x240302) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000002100)={0x0, 0x0, r9}) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r10, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r11, r12, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r11, r12, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r12, 0x80, 0x400}}, {0x4, 0x200000000000006, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r11, r12, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r12, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r11, r12, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x1, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r13, r12, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r11, r12, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/deve\x00'/16}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0xb000, 0x401, r11, r12, 0x1d24, 0x2004}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) write$FUSE_ENTRY(r5, &(0x7f0000000040)={0x90, 0xfffffffffffffffe, 0x0, {0x5, 0x0, 0xa2b0, 0x0, 0x2, 0x0, {0x5, 0x3, 0x1, 0x400, 0x6, 0x550, 0x0, 0x1ff, 0x4, 0x4000, 0x8, r13, 0x0, 0x7e88, 0x6}}}, 0x90) 06:34:21 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xfec00000}, 0x20) [ 3052.935534] __should_failslab+0x115/0x180 [ 3052.939785] should_failslab+0x5/0x10 [ 3052.943597] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3052.948716] __kmalloc_node+0x38/0x70 [ 3052.952536] blk_mq_alloc_tag_set+0x3c2/0xa30 [ 3052.957055] loop_add+0x26d/0x8a0 [ 3052.960532] loop_control_ioctl+0x16c/0x480 [ 3052.964863] ? loop_lookup+0x1d0/0x1d0 [ 3052.968759] ? ksys_write+0x241/0x2a0 [ 3052.972568] ? loop_lookup+0x1d0/0x1d0 [ 3052.976487] do_vfs_ioctl+0xcdb/0x12e0 [ 3052.980388] ? lock_downgrade+0x720/0x720 06:34:21 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xff000000}, 0x20) [ 3052.984550] ? check_preemption_disabled+0x41/0x280 [ 3052.989580] ? ioctl_preallocate+0x200/0x200 [ 3052.994031] ? __fget+0x356/0x510 [ 3052.997498] ? do_dup2+0x450/0x450 [ 3053.001043] ? vfs_write+0x393/0x540 [ 3053.004761] ? fput+0x2b/0x190 [ 3053.007970] ksys_ioctl+0x9b/0xc0 [ 3053.011433] __x64_sys_ioctl+0x6f/0xb0 [ 3053.015332] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3053.020010] do_syscall_64+0xf9/0x620 [ 3053.023831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3053.029029] RIP: 0033:0x4665f9 06:34:21 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x17) 06:34:21 executing program 3: socket(0xa, 0x3, 0x3) [ 3053.032226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3053.051134] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3053.058941] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3053.066221] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3053.073502] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3053.080781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3053.088063] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:21 executing program 5 (fault-call:1 fault-nth:3): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:21 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) 06:34:21 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a882, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) read$FUSE(r5, &(0x7f00000046c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, r6, {0x7, 0x21, 0x5, 0x8c0, 0xdd, 0x2, 0x7, 0x6}}, 0x50) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r8 = socket(0x54, 0x1, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000001c0)={r7, r8, 0x1, 0x80, &(0x7f0000000140)="a88c9f63d6ca87806ddfb241e142b780a86b4b31a25f8a6e2a42d0753660e6b08542b57a3d94e50e1cae5b5456c31bc6254efe67d4e6c5c491b8ef3eebceb4ac11e911c80110016cfd558fd6431e5566625fbd7cf522c37443d63ebb27b7c7014f45c1f2e5d69abb771b759bd9529932fee8c7a49fb79b755608c17d8bd18d88", 0x3f, 0x0, 0x9ac, 0x800, 0x7ff, 0x1, 0x0, 'syz1\x00'}) 06:34:21 executing program 3: r0 = gettid() sched_rr_get_interval(r0, &(0x7f0000000100)) r1 = socket(0xa, 0x3, 0x3) clock_gettime(0x6, &(0x7f00000000c0)) sched_rr_get_interval(r0, &(0x7f0000000280)) r2 = fork() ptrace$peeksig(0x4209, r2, &(0x7f0000000080)={0x3, 0x1, 0x1}, &(0x7f00000001c0)=[{}]) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xfffffffd}, 0x20) fork() getsockname(r1, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80) 06:34:22 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20000060) [ 3053.186996] FAULT_INJECTION: forcing a failure. [ 3053.186996] name failslab, interval 1, probability 0, space 0, times 0 [ 3053.206277] CPU: 1 PID: 22732 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3053.214195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3053.223558] Call Trace: [ 3053.226160] dump_stack+0x1fc/0x2ef [ 3053.229803] should_fail.cold+0xa/0xf 06:34:22 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={r2}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f, 0x3}, 0x20) [ 3053.233805] ? setup_fault_attr+0x200/0x200 [ 3053.238142] ? lock_acquire+0x170/0x3c0 [ 3053.242134] __should_failslab+0x115/0x180 [ 3053.246382] should_failslab+0x5/0x10 [ 3053.250198] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3053.255316] blk_mq_init_tags+0x6a/0x2b0 [ 3053.259391] blk_mq_alloc_rq_map+0x9d/0x230 [ 3053.263727] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 3053.268249] blk_mq_alloc_tag_set+0x589/0xa30 [ 3053.272767] loop_add+0x26d/0x8a0 [ 3053.276236] loop_control_ioctl+0x16c/0x480 [ 3053.280566] ? loop_lookup+0x1d0/0x1d0 [ 3053.284470] ? ksys_write+0x241/0x2a0 [ 3053.288284] ? loop_lookup+0x1d0/0x1d0 [ 3053.292188] do_vfs_ioctl+0xcdb/0x12e0 [ 3053.296086] ? lock_downgrade+0x720/0x720 [ 3053.300241] ? check_preemption_disabled+0x41/0x280 [ 3053.305268] ? ioctl_preallocate+0x200/0x200 [ 3053.309694] ? __fget+0x356/0x510 [ 3053.313158] ? do_dup2+0x450/0x450 [ 3053.316706] ? vfs_write+0x393/0x540 [ 3053.320433] ? fput+0x2b/0x190 [ 3053.323730] ksys_ioctl+0x9b/0xc0 [ 3053.327197] __x64_sys_ioctl+0x6f/0xb0 [ 3053.331090] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3053.335682] do_syscall_64+0xf9/0x620 [ 3053.339618] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3053.344818] RIP: 0033:0x4665f9 [ 3053.348020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3053.366927] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3053.374682] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 06:34:22 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r1 = socket(0x3, 0x5, 0x7fff) getsockname$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x20) 06:34:22 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x200}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfa}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x58}}, 0x48000) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}, 0xfffff800}, 0x20) 06:34:22 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5421, 0x1) [ 3053.381961] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3053.389235] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3053.396513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3053.403790] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 [ 3053.417206] blk-mq: reduced tag depth (128 -> 64) 06:34:22 executing program 4: r0 = socket(0x9, 0x3, 0x3) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/83, 0x53}], 0x1, &(0x7f0000000180)=""/23, 0x17}, 0x2002) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000440)=""/21, 0x15}], 0x1, &(0x7f0000000340)=""/156, 0x9c}, 0x40000040) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000200)={0x3, [0x0, 0x0, 0x0]}) 06:34:22 executing program 5 (fault-call:1 fault-nth:4): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:22 executing program 3: r0 = socket(0xa, 0x3, 0x3) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000040), 0x10) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:22 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:22 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) socketpair(0x21, 0x3, 0x5, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0xb636bd62b80dc647) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000640)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc2fc, 0x8000, 0x0, 0xfff, 0x8, "f69c3403bfac64037ee6fe41cab0f2513d65a61255e6d87c8d6463c4b5282283e44815d4d88dbbcc1d4fcc6a5c39605979cd198ab6398b353c2d5dff2f223d4cc1ce8c08e472667174d6749ffa6f1787c9193e3283a8597d4ee9a75316dbfddcea80423966705b1a1a298d8658caae9c7c2b99a5249bddd2602c29c1f1e5367e"}) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/236) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x850) write$FUSE_OPEN(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="130200000000000000000300000006001d00000000000c0010000000000000000000"], 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x2f}}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x8000) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x20) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80) r6 = socket(0x0, 0x80000, 0x1f) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r6, 0x28, 0x6, &(0x7f00000004c0)={r7, r8/1000+60000}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) [ 3053.578320] FAULT_INJECTION: forcing a failure. [ 3053.578320] name failslab, interval 1, probability 0, space 0, times 0 [ 3053.590359] CPU: 1 PID: 22769 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3053.598352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3053.607709] Call Trace: [ 3053.610314] dump_stack+0x1fc/0x2ef [ 3053.613964] should_fail.cold+0xa/0xf [ 3053.617777] ? setup_fault_attr+0x200/0x200 [ 3053.622109] ? lock_acquire+0x170/0x3c0 [ 3053.626097] __should_failslab+0x115/0x180 [ 3053.630341] should_failslab+0x5/0x10 [ 3053.634170] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3053.639290] __kmalloc_node+0x38/0x70 [ 3053.643099] sbitmap_init_node+0x123/0x440 [ 3053.647352] sbitmap_queue_init_node+0x37/0x6c0 [ 3053.652061] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3053.657092] blk_mq_init_tags+0x10d/0x2b0 [ 3053.661259] blk_mq_alloc_rq_map+0x9d/0x230 [ 3053.665608] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 3053.670205] blk_mq_alloc_tag_set+0x589/0xa30 [ 3053.674751] loop_add+0x26d/0x8a0 06:34:22 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5450, 0x1) [ 3053.678221] loop_control_ioctl+0x16c/0x480 [ 3053.682558] ? loop_lookup+0x1d0/0x1d0 [ 3053.686460] ? ksys_write+0x241/0x2a0 [ 3053.690264] ? loop_lookup+0x1d0/0x1d0 [ 3053.694164] do_vfs_ioctl+0xcdb/0x12e0 [ 3053.698065] ? lock_downgrade+0x720/0x720 [ 3053.702227] ? check_preemption_disabled+0x41/0x280 [ 3053.707253] ? ioctl_preallocate+0x200/0x200 [ 3053.711678] ? __fget+0x356/0x510 [ 3053.715235] ? do_dup2+0x450/0x450 [ 3053.718782] ? vfs_write+0x393/0x540 [ 3053.722505] ? fput+0x2b/0x190 [ 3053.725707] ksys_ioctl+0x9b/0xc0 06:34:22 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000080)) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x20) socketpair(0x28, 0x6, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, 0x1403, 0x2, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_macvtap\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) [ 3053.729170] __x64_sys_ioctl+0x6f/0xb0 [ 3053.733069] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3053.737660] do_syscall_64+0xf9/0x620 [ 3053.741483] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3053.746770] RIP: 0033:0x4665f9 [ 3053.749965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3053.768870] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:34:22 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x501202, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000080)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000ffdbdf250000000005001200ff0000000500060069000300050006004600000005000700030000000800180000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000060}, 0x4008801) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000200)={0x91, 0x9a, 0x4a1064bb, {0x1783, 0xb6}, 0x400, 0x800}) getpeername(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000001c0)=0x80) [ 3053.776588] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3053.783867] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3053.791146] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3053.798421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3053.805701] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:22 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5451, 0x1) 06:34:22 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port1\x00', 0x0, 0x20410}) write$sndseq(r0, &(0x7f00000001c0)=[{0x7c, 0x3, 0xe5, 0x2, @tick=0xf87, {0x3, 0x4}, {0x8, 0x5}, @raw32={[0x6, 0x1ff, 0xffffff37]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000000)={0x5, 0xfb2, 0x1, 'queue0\x00', 0xfff}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:22 executing program 3: r0 = socket(0xa, 0x3, 0x3) getsockname(r0, &(0x7f0000000040)=@nl=@proc, &(0x7f00000000c0)=0x80) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) [ 3053.903643] blk-mq: reduced tag depth (128 -> 64) 06:34:22 executing program 5 (fault-call:1 fault-nth:5): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:22 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:22 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5452, 0x1) [ 3054.094936] FAULT_INJECTION: forcing a failure. [ 3054.094936] name failslab, interval 1, probability 0, space 0, times 0 [ 3054.110739] CPU: 1 PID: 22809 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3054.118651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3054.128021] Call Trace: [ 3054.130623] dump_stack+0x1fc/0x2ef [ 3054.134263] should_fail.cold+0xa/0xf [ 3054.138075] ? setup_fault_attr+0x200/0x200 06:34:22 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x5460, 0x1) [ 3054.142405] ? lock_acquire+0x170/0x3c0 [ 3054.146392] __should_failslab+0x115/0x180 [ 3054.150643] should_failslab+0x5/0x10 [ 3054.155021] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3054.160137] sbitmap_queue_init_node+0x240/0x6c0 [ 3054.164923] blk_mq_init_tags+0x10d/0x2b0 [ 3054.169086] blk_mq_alloc_rq_map+0x9d/0x230 [ 3054.173465] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 3054.177979] blk_mq_alloc_tag_set+0x589/0xa30 [ 3054.182496] loop_add+0x26d/0x8a0 [ 3054.185969] loop_control_ioctl+0x16c/0x480 [ 3054.190304] ? loop_lookup+0x1d0/0x1d0 06:34:23 executing program 4: r0 = socket(0x29, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x40c4) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2e}, 0x8}, 0x0) socket(0x23, 0x2, 0x3) 06:34:23 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x40049409, 0x1) [ 3054.194206] ? ksys_write+0x241/0x2a0 [ 3054.198016] ? loop_lookup+0x1d0/0x1d0 [ 3054.201909] do_vfs_ioctl+0xcdb/0x12e0 [ 3054.205806] ? lock_downgrade+0x720/0x720 [ 3054.209967] ? check_preemption_disabled+0x41/0x280 [ 3054.214993] ? ioctl_preallocate+0x200/0x200 [ 3054.219415] ? __fget+0x356/0x510 [ 3054.222877] ? do_dup2+0x450/0x450 [ 3054.226428] ? vfs_write+0x393/0x540 [ 3054.230180] ? fput+0x2b/0x190 [ 3054.233388] ksys_ioctl+0x9b/0xc0 [ 3054.236861] __x64_sys_ioctl+0x6f/0xb0 [ 3054.240757] ? lockdep_hardirqs_on+0x3a8/0x5c0 06:34:23 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}, 0x20) [ 3054.245556] do_syscall_64+0xf9/0x620 [ 3054.249376] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3054.254578] RIP: 0033:0x4665f9 [ 3054.257778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3054.276685] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3054.284408] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3054.291783] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3054.299070] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3054.306348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3054.313652] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:23 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4020940d, 0x1) [ 3054.339566] blk-mq: reduced tag depth (128 -> 64) 06:34:23 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r2, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000004dba6da0c235c11d920954aeb8dd051b67b707d4433111871a0ed52883ffb5fd18a27ddb523652e6230566fc61ab0a96c50f01504340da243f267a6873160ada2a6bf61b60889404683cbdb67bdaff2fe062173cc6c46c0e1a6624", @ANYRES16=r2, @ANYBLOB="100026bd7000fcdbdf25040000000500140007000000060003000400000008000c00030000000500040005000000050013001f0000000800110001000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = socket(0xa, 0x3, 0x3) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:23 executing program 5 (fault-call:1 fault-nth:6): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:23 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000040)) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, r2, {0x9, 0x4, 0x2d, 0x9}}, 0x20) 06:34:23 executing program 4: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000080)={{0x36, 0xe0}, 'port0\x00', 0x38, 0x0, 0x9, 0x0, 0x9, 0x2, 0x4, 0x0, 0x7, 0x1}) r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:23 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:23 executing program 3: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x202, @dev, 0x6}, 0x20) [ 3054.493113] FAULT_INJECTION: forcing a failure. [ 3054.493113] name failslab, interval 1, probability 0, space 0, times 0 [ 3054.504448] CPU: 1 PID: 22845 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3054.512337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3054.521696] Call Trace: [ 3054.524303] dump_stack+0x1fc/0x2ef [ 3054.527956] should_fail.cold+0xa/0xf [ 3054.531770] ? setup_fault_attr+0x200/0x200 [ 3054.536102] ? lock_acquire+0x170/0x3c0 06:34:23 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x1) [ 3054.540092] __should_failslab+0x115/0x180 [ 3054.544337] should_failslab+0x5/0x10 [ 3054.548147] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3054.553269] sbitmap_queue_init_node+0x240/0x6c0 [ 3054.558051] blk_mq_init_tags+0x16f/0x2b0 [ 3054.562216] blk_mq_alloc_rq_map+0x9d/0x230 [ 3054.566556] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 3054.571068] blk_mq_alloc_tag_set+0x589/0xa30 [ 3054.575587] loop_add+0x26d/0x8a0 [ 3054.579061] loop_control_ioctl+0x16c/0x480 [ 3054.583390] ? loop_lookup+0x1d0/0x1d0 [ 3054.587288] ? ksys_write+0x241/0x2a0 06:34:23 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_DQBUF(r0, 0x4020940d, 0x0) read$sequencer(0xffffffffffffffff, &(0x7f0000000200)=""/245, 0xf5) socket(0xa, 0x3, 0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRES16, @ANYBLOB="0040000100000000000000014d1100740068000006049078ac1e0001ffffffff014408ddc0000400e84411564fe23a59999c46a65869e5b5a400442c42b1ac1414bb00000003e0000002000000070a01010000000040ac141444000000067f0000010000f2650186170000000005115c7e5be2be70c1da82f8ecb0b3b9d10000"]}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x88002, 0x0) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) [ 3054.591096] ? loop_lookup+0x1d0/0x1d0 [ 3054.594995] do_vfs_ioctl+0xcdb/0x12e0 [ 3054.598893] ? lock_downgrade+0x720/0x720 [ 3054.603054] ? check_preemption_disabled+0x41/0x280 [ 3054.608080] ? ioctl_preallocate+0x200/0x200 [ 3054.612499] ? __fget+0x356/0x510 [ 3054.615959] ? do_dup2+0x450/0x450 [ 3054.619594] ? vfs_write+0x393/0x540 [ 3054.623317] ? fput+0x2b/0x190 [ 3054.626518] ksys_ioctl+0x9b/0xc0 [ 3054.629984] __x64_sys_ioctl+0x6f/0xb0 [ 3054.633880] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3054.638469] do_syscall_64+0xf9/0x620 06:34:23 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0045878, 0x1) [ 3054.642288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3054.647914] RIP: 0033:0x4665f9 [ 3054.651109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3054.670101] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3054.677821] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3054.685136] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 06:34:23 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc0189436, 0x1) [ 3054.692414] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3054.699691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3054.706971] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 [ 3054.766740] blk-mq: reduced tag depth (128 -> 64) 06:34:23 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x20) 06:34:23 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1409, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4020) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x302) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x14400, 0x0) 06:34:23 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:23 executing program 5 (fault-call:1 fault-nth:7): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:23 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x20) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x4000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x140b, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) 06:34:23 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:23 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0xc020660b, 0x1) 06:34:23 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000080)={0x5, 0xff, 0x1, 'queue1\x00', 0x3}) write$FUSE_OPEN(r0, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc100565c, &(0x7f00000002c0)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x18000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000001c0)={0x353, 0x1, 0x1000, {0x10001, 0xa799}, 0x1000, 0x6}) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, &(0x7f0000000040)) r3 = socket(0xa, 0x3, 0x3) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:23 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3054.994057] FAULT_INJECTION: forcing a failure. [ 3054.994057] name failslab, interval 1, probability 0, space 0, times 0 [ 3055.011179] CPU: 1 PID: 22894 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3055.019090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3055.028447] Call Trace: [ 3055.031077] dump_stack+0x1fc/0x2ef [ 3055.034721] should_fail.cold+0xa/0xf [ 3055.038539] ? setup_fault_attr+0x200/0x200 06:34:23 executing program 4: r0 = socket(0xa, 0x3, 0x3) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080)) [ 3055.042873] ? __lockdep_init_map+0x100/0x5a0 [ 3055.047380] __should_failslab+0x115/0x180 [ 3055.051731] should_failslab+0x5/0x10 [ 3055.055553] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3055.060677] __kmalloc_node+0x38/0x70 [ 3055.064496] blk_mq_alloc_rq_map+0xdf/0x230 [ 3055.068837] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 3055.073352] blk_mq_alloc_tag_set+0x589/0xa30 [ 3055.077878] loop_add+0x26d/0x8a0 [ 3055.081346] loop_control_ioctl+0x16c/0x480 [ 3055.085681] ? loop_lookup+0x1d0/0x1d0 [ 3055.089587] ? ksys_write+0x241/0x2a0 06:34:23 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0x3}, 0x20) [ 3055.093395] ? loop_lookup+0x1d0/0x1d0 [ 3055.097291] do_vfs_ioctl+0xcdb/0x12e0 [ 3055.101187] ? lock_downgrade+0x720/0x720 [ 3055.105341] ? check_preemption_disabled+0x41/0x280 [ 3055.110450] ? ioctl_preallocate+0x200/0x200 [ 3055.114879] ? __fget+0x356/0x510 [ 3055.118343] ? do_dup2+0x450/0x450 [ 3055.121891] ? vfs_write+0x393/0x540 [ 3055.125613] ? fput+0x2b/0x190 [ 3055.128816] ksys_ioctl+0x9b/0xc0 [ 3055.132287] __x64_sys_ioctl+0x6f/0xb0 [ 3055.136181] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3055.140772] do_syscall_64+0xf9/0x620 [ 3055.144584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3055.149776] RIP: 0033:0x4665f9 [ 3055.152971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3055.171893] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3055.179612] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3055.186893] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 06:34:24 executing program 3: r0 = socket(0x1a, 0x1, 0x5) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}, @L2TP_ATTR_DEBUG={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) r1 = socket(0xa, 0x3, 0x3) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:24 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0xfffffffe}, 0x20) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000080)=0x5) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000000)=0x2) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x20002, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) socketpair(0x9, 0x1, 0x100, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$l2tp6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x20) [ 3055.194169] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3055.201451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3055.208727] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:24 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1412, 0x4, 0x70bf2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x8000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x480902, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1410, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3055.265460] blk-mq: reduced tag depth (128 -> 64) 06:34:24 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000180)=0x167) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) 06:34:24 executing program 5 (fault-call:1 fault-nth:8): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:24 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x6}, 0x20) getpeername$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x20) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x5f, 0x7cc00) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:24 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:24 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x224e00, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000040)) 06:34:24 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) 06:34:24 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) 06:34:24 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) socket(0x26, 0x80000, 0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000280)=0x20) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r2, r0, 0x6de, 0x1d, &(0x7f0000000100)="d4c465a5a830815223ca683232117c61d65447e8e760cacf92e9ef8fb0", 0x0, 0x40, 0x1, 0xfffc, 0x3f, 0x0, 0x200, 'syz0\x00'}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair(0x2c, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$l2tp6(r3, &(0x7f0000000140)={0xa, 0x0, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8001, 0x2}, 0x20) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) fcntl$getownex(r5, 0x10, &(0x7f00000002c0)) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d05, &(0x7f0000000040)=0xd) socket$inet_udp(0x2, 0x2, 0x0) 06:34:24 executing program 4: r0 = socket(0xa, 0x3, 0x103) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) connect$vsock_stream(r1, &(0x7f0000001400)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000000), 0x10) recvmsg(r3, &(0x7f0000001880)={&(0x7f0000001440)=@caif=@dgm, 0xac, &(0x7f0000002d40)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/54, 0x36}, {&(0x7f0000001500)=""/135, 0x87}, {&(0x7f00000015c0)=""/71, 0x47}, {&(0x7f0000002bc0)=""/165, 0x98}, {&(0x7f00000028c0)=""/254, 0xfe}, {&(0x7f0000001700)=""/85, 0xffffffffffffff61}, {&(0x7f0000001640)=""/67, 0x34}, {&(0x7f0000001780)=""/37, 0x2b}, {&(0x7f00000016c0)=""/18, 0x12}, {&(0x7f00000017c0)=""/94}, {&(0x7f0000002c80)=""/188}, {&(0x7f0000001840)=""/27}, {&(0x7f00000029c0)=""/16}], 0xa, &(0x7f0000002b00)=""/134, 0x86}, 0x2062) write$vhost_msg_v2(r2, &(0x7f0000001180)={0x2, 0x0, {&(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/158, 0x1, 0x4}}, 0x48) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000013c0)={0x0, r2}) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000001200)={"9fa0ac96318428a26bfc976abc5171eb0f06bae3f4bfb9af63951f6e22b0", 0x4, 0x2, 0x401, 0x5, 0xd3e, 0x9, 0x4, 0x2, [0x7fffffff, 0x3, 0x9, 0x4d1, 0x9, 0x6, 0x8, 0x8, 0x7, 0xfffffff8, 0x86, 0x10000, 0x101, 0x3dd, 0xc548, 0x0, 0x2, 0x9, 0x7fff]}) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r6) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000012c0)={0x2, @sliced={0x4630, [0x400, 0x1f, 0x3, 0x8, 0x4, 0x4, 0x7, 0xff01, 0x8, 0x8, 0xfffb, 0xd0, 0xf801, 0x92b6, 0x5c, 0x7, 0x5, 0x40, 0x100, 0x4, 0x4, 0x5, 0x9, 0x3, 0x7, 0x81, 0x1000, 0x4f6, 0x4, 0x4, 0x687, 0xecb5, 0x8, 0x5f, 0x7, 0x6, 0x6, 0x9bcd, 0xd54, 0x5, 0x0, 0xfff9, 0x3b0, 0x8, 0x4, 0x3, 0xffc2, 0x1], 0x101}}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3f}) [ 3055.532211] FAULT_INJECTION: forcing a failure. [ 3055.532211] name failslab, interval 1, probability 0, space 0, times 0 [ 3055.548143] CPU: 1 PID: 22944 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3055.556140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3055.565498] Call Trace: [ 3055.568103] dump_stack+0x1fc/0x2ef [ 3055.571749] should_fail.cold+0xa/0xf [ 3055.575571] ? setup_fault_attr+0x200/0x200 [ 3055.579915] ? __lockdep_init_map+0x100/0x5a0 [ 3055.584433] __should_failslab+0x115/0x180 [ 3055.588683] should_failslab+0x5/0x10 [ 3055.592501] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3055.597621] __kmalloc_node+0x38/0x70 [ 3055.601463] blk_mq_alloc_rq_map+0x120/0x230 [ 3055.605887] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 3055.610400] blk_mq_alloc_tag_set+0x589/0xa30 [ 3055.614919] loop_add+0x26d/0x8a0 [ 3055.618373] loop_control_ioctl+0x16c/0x480 [ 3055.622689] ? loop_lookup+0x1d0/0x1d0 [ 3055.626574] ? ksys_write+0x241/0x2a0 [ 3055.630368] ? loop_lookup+0x1d0/0x1d0 [ 3055.634247] do_vfs_ioctl+0xcdb/0x12e0 [ 3055.638130] ? lock_downgrade+0x720/0x720 [ 3055.642268] ? check_preemption_disabled+0x41/0x280 [ 3055.647294] ? ioctl_preallocate+0x200/0x200 [ 3055.651695] ? __fget+0x356/0x510 [ 3055.655163] ? do_dup2+0x450/0x450 [ 3055.658691] ? vfs_write+0x393/0x540 [ 3055.662393] ? fput+0x2b/0x190 [ 3055.665582] ksys_ioctl+0x9b/0xc0 [ 3055.669028] __x64_sys_ioctl+0x6f/0xb0 [ 3055.672909] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3055.677488] do_syscall_64+0xf9/0x620 [ 3055.681283] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3055.686463] RIP: 0033:0x4665f9 [ 3055.689646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3055.708543] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3055.716240] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3055.723496] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3055.730753] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3055.738011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3055.745283] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:24 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001080)={r0, r1, 0x8, 0x1000, &(0x7f0000000080)="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", 0x4, 0xcb, 0x2, 0xff, 0x3, 0x2, 0x81, 'syz0\x00'}) r2 = socket(0xa, 0x3, 0x3) connect$can_bcm(r2, &(0x7f0000000000)={0xa}, 0x6e) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:24 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xb}, 0x10) socket(0xa, 0x3, 0xae8) [ 3055.792986] blk-mq: reduced tag depth (128 -> 64) 06:34:24 executing program 5 (fault-call:1 fault-nth:9): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:24 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:24 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getpeername(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20021a}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x1406, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:24 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) 06:34:24 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={r0, r1, 0x7, 0xf5, &(0x7f0000000080)="56634540c074a9f0611c9f63b3bd9050c47ae83b8820960525bbecb46bce10cd85bbff60a0ad2b106f58ede7bd0e7ed73799ae75d3444235fd52fca60a89e4aa35e09a749c74973a94239ecaf75abb7d0629163f0afe1badf2cacb5854618adb03158673eb7ab40bfe623542214e8ea42a4b4e78a04c9a56f149aba54213c842e21c7f717081b567eebc025985bfb70c2430c02ccb1a75b90651c6d38d18a7a3b81388097d8deda9c6d2891cda590afb857012ee3242e3f7161add8bc08f1ee027954e58871bf2cd6e02144f43a1a5b601c5627738b057417e57f26987d2974595c88c5375adccb73b10eb1a5864da6edee4f15c1e", 0x4, 0x4c, 0x6, 0x7, 0x1ff, 0x0, 0x2, 'syz1\x00'}) 06:34:24 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0xb, 0x188, 0x7, {0x77359400}, {}, {0x2, 0x1}, 0x1, @can={{0x0, 0x1, 0x0, 0x1}, 0x3, 0x5, 0x0, 0x0, "5e3681475d3d94cb"}}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40004) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) [ 3055.992511] FAULT_INJECTION: forcing a failure. [ 3055.992511] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3056.027910] CPU: 0 PID: 22978 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3056.035824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3056.045192] Call Trace: [ 3056.047799] dump_stack+0x1fc/0x2ef [ 3056.051448] should_fail.cold+0xa/0xf [ 3056.055261] ? setup_fault_attr+0x200/0x200 [ 3056.059608] __alloc_pages_nodemask+0x239/0x2890 [ 3056.064460] ? kasan_kmalloc+0x139/0x160 [ 3056.068532] ? __kmalloc_node+0x4c/0x70 [ 3056.072516] ? blk_mq_alloc_rq_map+0x120/0x230 [ 3056.077113] ? __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 3056.081791] ? blk_mq_alloc_tag_set+0x589/0xa30 [ 3056.086493] ? loop_add+0x26d/0x8a0 06:34:24 executing program 3: r0 = socket(0xa, 0x3, 0x3) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001214200028bd70d05363c373e7e85f907346e46d00fbdbdf25080015000000000008000300021b0000"], 0x20}}, 0x4) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000001c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x22200, 0x0) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 06:34:24 executing program 3: r0 = socket(0xa, 0x4, 0x3ff) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) socket(0x25, 0x800, 0x3f) [ 3056.090127] ? loop_control_ioctl+0x16c/0x480 [ 3056.094710] ? do_vfs_ioctl+0xcdb/0x12e0 [ 3056.098776] ? do_syscall_64+0xf9/0x620 [ 3056.102755] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3056.108129] ? should_fail+0x142/0x7b0 [ 3056.112023] ? fs_reclaim_release+0xd0/0x110 [ 3056.116438] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3056.121286] ? setup_fault_attr+0x200/0x200 [ 3056.125609] ? lock_acquire+0x170/0x3c0 [ 3056.129603] ? check_preemption_disabled+0x41/0x280 [ 3056.134626] ? should_fail+0x142/0x7b0 [ 3056.138513] ? setup_fault_attr+0x200/0x200 06:34:24 executing program 3: socket(0x29, 0x800, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffc00, @loopback, 0x8ba0, 0x2}, 0xfffffffffffffd18) [ 3056.142839] ? __lockdep_init_map+0x100/0x5a0 [ 3056.147348] ? find_next_bit+0x105/0x130 [ 3056.151423] ? __cpu_to_node+0x7b/0xa0 [ 3056.155324] ? blk_mq_hw_queue_to_node+0xc1/0x100 [ 3056.160174] blk_mq_alloc_rqs+0x242/0x800 [ 3056.164342] ? blk_mq_alloc_rq_map+0xaa/0x230 [ 3056.168855] __blk_mq_alloc_rq_map+0x15b/0x3b0 [ 3056.173458] blk_mq_alloc_tag_set+0x589/0xa30 [ 3056.177973] loop_add+0x26d/0x8a0 [ 3056.181437] loop_control_ioctl+0x16c/0x480 [ 3056.185767] ? loop_lookup+0x1d0/0x1d0 [ 3056.189664] ? ksys_write+0x241/0x2a0 06:34:25 executing program 3: socket(0xa, 0x3, 0x3) socketpair(0x10, 0x80000, 0x7f, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x6, 0x6}, 0xa1) [ 3056.193501] ? loop_lookup+0x1d0/0x1d0 [ 3056.197397] do_vfs_ioctl+0xcdb/0x12e0 [ 3056.201289] ? lock_downgrade+0x720/0x720 [ 3056.205452] ? check_preemption_disabled+0x41/0x280 [ 3056.210475] ? ioctl_preallocate+0x200/0x200 [ 3056.214899] ? __fget+0x356/0x510 [ 3056.218367] ? do_dup2+0x450/0x450 [ 3056.221907] ? vfs_write+0x393/0x540 [ 3056.225630] ? fput+0x2b/0x190 [ 3056.228836] ksys_ioctl+0x9b/0xc0 [ 3056.232299] __x64_sys_ioctl+0x6f/0xb0 [ 3056.236202] ? lockdep_hardirqs_on+0x3a8/0x5c0 06:34:25 executing program 3: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0xb, 0x188, 0x7, {0x77359400}, {}, {0x2, 0x1}, 0x1, @can={{0x0, 0x1, 0x0, 0x1}, 0x3, 0x5, 0x0, 0x0, "5e3681475d3d94cb"}}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40004) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x20) 06:34:25 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x224e00, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000040)) [ 3056.240790] do_syscall_64+0xf9/0x620 [ 3056.244602] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3056.249798] RIP: 0033:0x4665f9 [ 3056.252993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3056.271901] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3056.279642] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3056.286923] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3056.294209] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3056.301485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3056.308754] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:25 executing program 5 (fault-call:1 fault-nth:10): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) [ 3056.455523] FAULT_INJECTION: forcing a failure. [ 3056.455523] name failslab, interval 1, probability 0, space 0, times 0 [ 3056.471237] CPU: 0 PID: 23024 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3056.479147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3056.488497] Call Trace: [ 3056.491104] dump_stack+0x1fc/0x2ef [ 3056.494730] should_fail.cold+0xa/0xf [ 3056.498631] ? setup_fault_attr+0x200/0x200 [ 3056.502953] ? lock_acquire+0x170/0x3c0 [ 3056.506930] __should_failslab+0x115/0x180 [ 3056.511156] should_failslab+0x5/0x10 [ 3056.514957] kmem_cache_alloc_node+0x245/0x3b0 [ 3056.519532] blk_alloc_queue_node+0x32/0xbf0 [ 3056.523943] blk_mq_init_queue+0x44/0xa0 [ 3056.527997] loop_add+0x2cb/0x8a0 [ 3056.531436] loop_control_ioctl+0x16c/0x480 [ 3056.535740] ? loop_lookup+0x1d0/0x1d0 [ 3056.539611] ? ksys_write+0x241/0x2a0 [ 3056.543406] ? loop_lookup+0x1d0/0x1d0 [ 3056.547286] do_vfs_ioctl+0xcdb/0x12e0 [ 3056.551159] ? lock_downgrade+0x720/0x720 [ 3056.555290] ? check_preemption_disabled+0x41/0x280 [ 3056.560301] ? ioctl_preallocate+0x200/0x200 [ 3056.564710] ? __fget+0x356/0x510 [ 3056.568149] ? do_dup2+0x450/0x450 [ 3056.571670] ? vfs_write+0x393/0x540 [ 3056.575365] ? fput+0x2b/0x190 [ 3056.578540] ksys_ioctl+0x9b/0xc0 [ 3056.581990] __x64_sys_ioctl+0x6f/0xb0 [ 3056.585884] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3056.590460] do_syscall_64+0xf9/0x620 [ 3056.594261] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3056.599432] RIP: 0033:0x4665f9 [ 3056.602616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3056.621517] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3056.629220] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3056.636489] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3056.643924] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 06:34:25 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:25 executing program 4: r0 = socket(0xa, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000080)) 06:34:25 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x880, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8004080}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x1402, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8891}, 0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:25 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x224e00, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000040)) 06:34:25 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x4400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3056.651264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3056.658539] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:25 executing program 5 (fault-call:1 fault-nth:11): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:25 executing program 2: ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) [ 3056.814336] FAULT_INJECTION: forcing a failure. [ 3056.814336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3056.826183] CPU: 1 PID: 23040 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3056.834162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3056.843693] Call Trace: [ 3056.846304] dump_stack+0x1fc/0x2ef [ 3056.849945] should_fail.cold+0xa/0xf [ 3056.853763] ? setup_fault_attr+0x200/0x200 [ 3056.858097] ? check_preemption_disabled+0x41/0x280 06:34:25 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:25 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x20) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1404, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x10) [ 3056.863131] __alloc_pages_nodemask+0x239/0x2890 [ 3056.867900] ? __alloc_pages_nodemask+0x1b43/0x2890 [ 3056.873184] ? kasan_kmalloc+0x139/0x160 [ 3056.877267] ? __lock_acquire+0x6de/0x3ff0 [ 3056.881522] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3056.886414] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3056.891264] ? setup_fault_attr+0x200/0x200 [ 3056.895594] ? lock_acquire+0x170/0x3c0 [ 3056.899582] ? should_fail+0x142/0x7b0 [ 3056.903482] ? setup_fault_attr+0x200/0x200 [ 3056.907810] ? __lockdep_init_map+0x100/0x5a0 06:34:25 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0xe295, 0x1, 0x4, 0x4000, 0x18a1, {0x77359400}, {0x2, 0x8, 0x7, 0x2, 0x1, 0x3f, "88a56b12"}, 0x9, 0x2, @fd=r1, 0x6, 0x0, r2}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1) [ 3056.912311] ? find_next_bit+0x105/0x130 [ 3056.916383] ? __cpu_to_node+0x7b/0xa0 [ 3056.920308] cache_grow_begin+0xa4/0x8a0 [ 3056.924377] ? setup_fault_attr+0x200/0x200 [ 3056.928699] ? lock_acquire+0x170/0x3c0 [ 3056.932690] cache_alloc_refill+0x273/0x340 [ 3056.937029] kmem_cache_alloc_node+0x39e/0x3b0 [ 3056.941625] blk_alloc_queue_node+0x32/0xbf0 [ 3056.946049] blk_mq_init_queue+0x44/0xa0 [ 3056.950119] loop_add+0x2cb/0x8a0 [ 3056.953582] loop_control_ioctl+0x16c/0x480 [ 3056.957914] ? loop_lookup+0x1d0/0x1d0 [ 3056.961817] ? ksys_write+0x241/0x2a0 [ 3056.965627] ? loop_lookup+0x1d0/0x1d0 [ 3056.969525] do_vfs_ioctl+0xcdb/0x12e0 [ 3056.973416] ? lock_downgrade+0x720/0x720 [ 3056.977565] ? check_preemption_disabled+0x41/0x280 [ 3056.982593] ? ioctl_preallocate+0x200/0x200 [ 3056.987003] ? __fget+0x356/0x510 [ 3056.990447] ? do_dup2+0x450/0x450 [ 3056.993984] ? vfs_write+0x393/0x540 [ 3056.997712] ? fput+0x2b/0x190 [ 3057.000926] ksys_ioctl+0x9b/0xc0 [ 3057.004373] __x64_sys_ioctl+0x6f/0xb0 [ 3057.008255] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3057.012888] do_syscall_64+0xf9/0x620 [ 3057.016691] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3057.021885] RIP: 0033:0x4665f9 [ 3057.025075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3057.043976] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3057.051698] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3057.058971] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3057.066232] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3057.073502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3057.080795] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:25 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x48845) r1 = socket(0xa, 0x3, 0x3) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x0, 0x800, 0x81, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000180), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x400, 0x5, {0x0, 0x2710}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x1b, 0x1, 0x0, 0x0, "e381aaa0c30f6ab59c3d9887df91434b3e78baee182b5cd228668f90b17c00c5cb6e6049b8d9a72c7e04541d42dfce9126d7e80c6fd4e5d4913b8355325bcec5"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000400}, 0x800) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x20) 06:34:26 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x224e00, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000040)) 06:34:26 executing program 5 (fault-call:1 fault-nth:12): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:26 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:26 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:26 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x301080, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7f) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x480400, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000080)) [ 3057.258243] FAULT_INJECTION: forcing a failure. [ 3057.258243] name failslab, interval 1, probability 0, space 0, times 0 [ 3057.299127] CPU: 1 PID: 23068 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3057.307058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3057.316420] Call Trace: [ 3057.319115] dump_stack+0x1fc/0x2ef [ 3057.322765] should_fail.cold+0xa/0xf [ 3057.326587] ? setup_fault_attr+0x200/0x200 [ 3057.330917] ? lock_acquire+0x170/0x3c0 [ 3057.334925] __should_failslab+0x115/0x180 [ 3057.339174] should_failslab+0x5/0x10 [ 3057.342987] kmem_cache_alloc_node_trace+0x244/0x3b0 06:34:26 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r4}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) 06:34:26 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28a2c1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x1402, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10040000}, 0x10000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) socketpair(0x2, 0x5, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000180)={r4, r5, 0xffff, 0xe9, &(0x7f0000000080)="784015c387be24d319b826b73d66611bb46ecd1da15fac38748b4a1ab0ab7d8d9cebb3556bf6c37425d9ca093b46d348f7db99412afd5b6a04b65c64a13387b05be95a71d478e5192b3d7d7a3ef187959abc5407759ed59a0d0c7a100d2b9ed142427ebed73cd69e6089ce81aa54858e079c95d26bf5a1e0b09d2b141d6db92571b01acec4f7aa8c3648a62605e69162b0c925992bf13619d971acd27e0fc2460515affdcccb8d712cf524ded1c1200f15cef3966143764abd838ef9cbd39353c897fc75064da348d421aecf4bb246fcc39d2e694d122cb9e1c6a7b5cf9434d7ba8289b40adc0925cd", 0x80, 0xf0, 0xe5b1, 0x400, 0xda5, 0x0, 0x0, 'syz0\x00'}) [ 3057.348097] __kmalloc_node+0x38/0x70 [ 3057.351912] ? mempool_free+0x370/0x370 [ 3057.355887] mempool_init_node+0x137/0x6c0 [ 3057.360166] ? mempool_alloc+0x350/0x350 [ 3057.364220] ? mempool_free+0x370/0x370 [ 3057.368292] mempool_init+0x38/0x50 [ 3057.372019] bioset_init+0x327/0x810 [ 3057.375753] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3057.380524] blk_alloc_queue_node+0x189/0xbf0 [ 3057.385036] blk_mq_init_queue+0x44/0xa0 [ 3057.389103] loop_add+0x2cb/0x8a0 [ 3057.392598] loop_control_ioctl+0x16c/0x480 06:34:26 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x70000, 0x8, {0x77359400}, {0x1, 0xc, 0x3, 0xfa, 0x44, 0xff, "e820fc2c"}, 0xac, 0x2, @userptr=0x7, 0x90, 0x0, r1}) r2 = socket(0xa, 0x3, 0x3) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000000)) [ 3057.396937] ? loop_lookup+0x1d0/0x1d0 [ 3057.400837] ? ksys_write+0x241/0x2a0 [ 3057.404646] ? loop_lookup+0x1d0/0x1d0 [ 3057.408546] do_vfs_ioctl+0xcdb/0x12e0 [ 3057.412443] ? lock_downgrade+0x720/0x720 [ 3057.416599] ? check_preemption_disabled+0x41/0x280 [ 3057.421624] ? ioctl_preallocate+0x200/0x200 [ 3057.426043] ? __fget+0x356/0x510 [ 3057.429502] ? do_dup2+0x450/0x450 [ 3057.433047] ? vfs_write+0x393/0x540 [ 3057.436767] ? fput+0x2b/0x190 [ 3057.439971] ksys_ioctl+0x9b/0xc0 [ 3057.443432] __x64_sys_ioctl+0x6f/0xb0 06:34:26 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) [ 3057.447326] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3057.451916] do_syscall_64+0xf9/0x620 [ 3057.455732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3057.461106] RIP: 0033:0x4665f9 [ 3057.464302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3057.483296] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3057.491016] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 06:34:26 executing program 4: getpeername(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x22ac0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r1, 0x80044dfd, &(0x7f0000000200)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x400460, 0x0) recvmsg(r2, &(0x7f0000000400)={&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)=""/49, 0x31}], 0x1, &(0x7f00000003c0)=""/43, 0x2b}, 0x20) getpeername(r0, &(0x7f0000000100)=@qipcrtr, &(0x7f0000000180)=0x80) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3}, 0x20) [ 3057.498296] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3057.505577] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3057.512849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3057.520126] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:26 executing program 3: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) 06:34:26 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x300) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000000380)=""/154, 0x9a}], 0x4}, 0x14000) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) getpeername$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x20) 06:34:26 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:26 executing program 5 (fault-call:1 fault-nth:13): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:26 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:26 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 06:34:26 executing program 3: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) 06:34:26 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x20) 06:34:26 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:26 executing program 3: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) [ 3057.745731] FAULT_INJECTION: forcing a failure. [ 3057.745731] name failslab, interval 1, probability 0, space 0, times 0 [ 3057.775516] CPU: 1 PID: 23120 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3057.783431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3057.792792] Call Trace: 06:34:26 executing program 3: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) [ 3057.795396] dump_stack+0x1fc/0x2ef [ 3057.799038] should_fail.cold+0xa/0xf [ 3057.802854] ? setup_fault_attr+0x200/0x200 [ 3057.807187] ? lock_acquire+0x170/0x3c0 [ 3057.811170] ? mempool_free+0x370/0x370 [ 3057.815150] ? mempool_free+0x370/0x370 [ 3057.819166] __should_failslab+0x115/0x180 [ 3057.823410] should_failslab+0x5/0x10 [ 3057.827221] kmem_cache_alloc+0x277/0x370 [ 3057.831390] ? mempool_alloc+0x350/0x350 [ 3057.835454] ? mempool_free+0x370/0x370 [ 3057.839431] mempool_init_node+0x2d0/0x6c0 06:34:26 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x301000) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r1 = socket(0x2c, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:26 executing program 3: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) [ 3057.843675] ? mempool_alloc+0x350/0x350 [ 3057.847740] ? mempool_free+0x370/0x370 [ 3057.851721] mempool_init+0x38/0x50 [ 3057.855362] bioset_init+0x327/0x810 [ 3057.859084] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3057.863850] blk_alloc_queue_node+0x189/0xbf0 [ 3057.868357] blk_mq_init_queue+0x44/0xa0 [ 3057.872424] loop_add+0x2cb/0x8a0 [ 3057.875888] loop_control_ioctl+0x16c/0x480 [ 3057.880218] ? loop_lookup+0x1d0/0x1d0 [ 3057.884120] ? ksys_write+0x241/0x2a0 [ 3057.887930] ? loop_lookup+0x1d0/0x1d0 [ 3057.891840] do_vfs_ioctl+0xcdb/0x12e0 06:34:26 executing program 3: bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) [ 3057.895736] ? lock_downgrade+0x720/0x720 [ 3057.899890] ? check_preemption_disabled+0x41/0x280 [ 3057.904912] ? ioctl_preallocate+0x200/0x200 [ 3057.909330] ? __fget+0x356/0x510 [ 3057.912790] ? do_dup2+0x450/0x450 [ 3057.916331] ? vfs_write+0x393/0x540 [ 3057.920055] ? fput+0x2b/0x190 [ 3057.923262] ksys_ioctl+0x9b/0xc0 [ 3057.926719] __x64_sys_ioctl+0x6f/0xb0 [ 3057.930606] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3057.935191] do_syscall_64+0xf9/0x620 [ 3057.939003] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3057.944198] RIP: 0033:0x4665f9 [ 3057.947395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3057.966394] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3057.974087] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3057.981342] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3057.988608] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 06:34:26 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x244000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) read$sequencer(0xffffffffffffffff, &(0x7f0000000000)=""/173, 0xad) [ 3057.995876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3058.003145] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:26 executing program 5 (fault-call:1 fault-nth:14): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:26 executing program 3: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) 06:34:26 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x501c00) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:26 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000080)) 06:34:26 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:26 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3058.117010] FAULT_INJECTION: forcing a failure. [ 3058.117010] name failslab, interval 1, probability 0, space 0, times 0 [ 3058.135323] CPU: 0 PID: 23155 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3058.143237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3058.152599] Call Trace: [ 3058.155213] dump_stack+0x1fc/0x2ef [ 3058.158854] should_fail.cold+0xa/0xf [ 3058.162696] ? setup_fault_attr+0x200/0x200 06:34:26 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:26 executing program 3: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) 06:34:27 executing program 3: r0 = socket(0x0, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) [ 3058.167153] ? lock_acquire+0x170/0x3c0 [ 3058.171144] __should_failslab+0x115/0x180 [ 3058.175393] should_failslab+0x5/0x10 [ 3058.179205] kmem_cache_alloc+0x277/0x370 [ 3058.183359] ? mempool_alloc+0x350/0x350 [ 3058.187433] mempool_init_node+0x2d0/0x6c0 [ 3058.191685] ? mempool_alloc+0x350/0x350 [ 3058.195755] ? mempool_free+0x370/0x370 [ 3058.199735] mempool_init+0x38/0x50 [ 3058.203374] bioset_init+0x327/0x810 [ 3058.207096] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3058.211877] blk_alloc_queue_node+0x189/0xbf0 06:34:27 executing program 3: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) [ 3058.216385] blk_mq_init_queue+0x44/0xa0 [ 3058.220456] loop_add+0x2cb/0x8a0 [ 3058.223920] loop_control_ioctl+0x16c/0x480 [ 3058.228250] ? loop_lookup+0x1d0/0x1d0 [ 3058.232145] ? ksys_write+0x241/0x2a0 [ 3058.235952] ? loop_lookup+0x1d0/0x1d0 [ 3058.239850] do_vfs_ioctl+0xcdb/0x12e0 [ 3058.243744] ? lock_downgrade+0x720/0x720 [ 3058.247894] ? check_preemption_disabled+0x41/0x280 [ 3058.252916] ? ioctl_preallocate+0x200/0x200 [ 3058.257333] ? __fget+0x356/0x510 [ 3058.260799] ? do_dup2+0x450/0x450 06:34:27 executing program 3: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) 06:34:27 executing program 3: r0 = socket(0xa, 0x0, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) [ 3058.264340] ? vfs_write+0x393/0x540 [ 3058.268059] ? fput+0x2b/0x190 [ 3058.271266] ksys_ioctl+0x9b/0xc0 [ 3058.274728] __x64_sys_ioctl+0x6f/0xb0 [ 3058.278636] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3058.283221] do_syscall_64+0xf9/0x620 [ 3058.287127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3058.292437] RIP: 0033:0x4665f9 [ 3058.295639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3058.314544] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3058.322254] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3058.329525] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3058.336803] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3058.344079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3058.351355] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:27 executing program 5 (fault-call:1 fault-nth:15): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:27 executing program 3: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) 06:34:27 executing program 4: socket(0xa, 0x3, 0x3) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}, 0x20) 06:34:27 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:27 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x1402, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) [ 3058.531894] FAULT_INJECTION: forcing a failure. [ 3058.531894] name failslab, interval 1, probability 0, space 0, times 0 [ 3058.550485] CPU: 1 PID: 23194 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3058.558391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3058.567772] Call Trace: [ 3058.570370] dump_stack+0x1fc/0x2ef [ 3058.574012] should_fail.cold+0xa/0xf [ 3058.577821] ? setup_fault_attr+0x200/0x200 06:34:27 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 06:34:27 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = getpgid(0xffffffffffffffff) write$FUSE_LK(r3, &(0x7f0000000380)={0x28, 0x0, 0x0, {{0xfffffffffffffffe, 0x1b, 0x2, r4}}}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x526e6a2b}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x20000000}, @generic={0x2, 0x8, 0x3, 0x535, 0x7}, @alu={0x4, 0x0, 0x0, 0xb, 0x2, 0xfffffffffffffff4, 0x4}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}, @alu={0x4, 0x0, 0x0, 0x5, 0x705930a1d2511857, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x0, 0x8001, 0x3ff}, 0x10, 0xffffffffffffffff}, 0x78) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x48000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000000)={{0x9, 0x6}, {0x9, 0xe7}, 0x7f, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f00000000c0)={0x3, 0xbc, 0xe625}) r7 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0), 0x2200) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', r5, 0x29, 0xbc, 0x7, 0x8c, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0xe40, 0x8, 0xecd}}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:27 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) getpeername(r0, &(0x7f0000000200)=@can, &(0x7f00000000c0)=0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c04ca74e4823b58ecb975a6f9ee8e079611a89b598cb697bc25b762f79ee7c23289b53a1378f5f5c1d336470dc92d98", @ANYRES16=r1, @ANYBLOB="080025bd7000fddbdf25030000000500140081000000"], 0x1c}}, 0x40090) [ 3058.582159] ? lock_acquire+0x170/0x3c0 [ 3058.586153] __should_failslab+0x115/0x180 [ 3058.590393] should_failslab+0x5/0x10 [ 3058.594195] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3058.599313] __kmalloc_node+0x38/0x70 [ 3058.603119] ? mempool_free+0x370/0x370 [ 3058.607105] mempool_init_node+0x137/0x6c0 [ 3058.611435] ? mempool_alloc+0x350/0x350 [ 3058.615504] ? mempool_free+0x370/0x370 [ 3058.619487] mempool_init+0x38/0x50 [ 3058.623135] bioset_init+0x532/0x810 [ 3058.626864] ? kmem_cache_alloc_node+0x351/0x3b0 06:34:27 executing program 4: r0 = socket(0xa, 0x3, 0x3) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x1406, 0x10, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000080}, 0x4000000) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3058.631644] blk_alloc_queue_node+0x189/0xbf0 [ 3058.636164] blk_mq_init_queue+0x44/0xa0 [ 3058.640254] loop_add+0x2cb/0x8a0 [ 3058.643747] loop_control_ioctl+0x16c/0x480 [ 3058.648075] ? loop_lookup+0x1d0/0x1d0 [ 3058.651975] ? ksys_write+0x241/0x2a0 [ 3058.655781] ? loop_lookup+0x1d0/0x1d0 [ 3058.659675] do_vfs_ioctl+0xcdb/0x12e0 [ 3058.663573] ? lock_downgrade+0x720/0x720 [ 3058.667729] ? check_preemption_disabled+0x41/0x280 [ 3058.672754] ? ioctl_preallocate+0x200/0x200 [ 3058.677173] ? __fget+0x356/0x510 06:34:27 executing program 4: r0 = socket(0x2, 0xa, 0x200003) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000080)) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3058.680634] ? do_dup2+0x450/0x450 [ 3058.684173] ? vfs_write+0x393/0x540 [ 3058.687980] ? fput+0x2b/0x190 [ 3058.691186] ksys_ioctl+0x9b/0xc0 [ 3058.694644] __x64_sys_ioctl+0x6f/0xb0 [ 3058.698622] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3058.703209] do_syscall_64+0xf9/0x620 [ 3058.707026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3058.712220] RIP: 0033:0x4665f9 [ 3058.715417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3058.734320] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3058.742025] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3058.749352] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3058.756739] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3058.764015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3058.771380] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:27 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:27 executing program 5 (fault-call:1 fault-nth:16): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:27 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000040)={0x7, 0x5, 0x1, 'queue0\x00', 0x1}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:27 executing program 3: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) 06:34:27 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xc) 06:34:27 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000080)) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:27 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0xc0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)={{0x4}, {0x1, 0x3f}, 0x8, 0x5, 0x8}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x42, &(0x7f0000000040)="28477b4ceb01d909b1f6a1b275369a0579fa54c529bc463f0853b155de51179aa74d364f68603099b0600ba2d05e1fae8b4164d91da8ab4fcf64e24ee6de61f110bc", 0x5, 0x38, 0x8, 0x6, 0x5, 0x0, 0x7, 'syz0\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) write$vhost_msg_v2(r3, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000340)=""/102, 0x66, &(0x7f00000003c0)=""/226, 0x3, 0x4}}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x216, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x40) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002680)={0x2020}, 0xffffffffffffffc6) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000280)={0x200, 0x9, 0x0, 'queue1\x00', 0x8}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x400040, 0x0) [ 3058.954056] FAULT_INJECTION: forcing a failure. [ 3058.954056] name failslab, interval 1, probability 0, space 0, times 0 [ 3058.973638] CPU: 1 PID: 23239 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3058.981552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3058.990908] Call Trace: [ 3058.993518] dump_stack+0x1fc/0x2ef [ 3058.997166] should_fail.cold+0xa/0xf [ 3059.000978] ? setup_fault_attr+0x200/0x200 [ 3059.005300] ? lock_acquire+0x170/0x3c0 [ 3059.009277] __should_failslab+0x115/0x180 [ 3059.013520] should_failslab+0x5/0x10 [ 3059.017317] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3059.022417] __kmalloc_node+0x38/0x70 [ 3059.026218] ? mempool_free+0x370/0x370 [ 3059.030198] mempool_init_node+0x137/0x6c0 [ 3059.034447] ? mempool_alloc+0x350/0x350 [ 3059.038503] ? mempool_free+0x370/0x370 [ 3059.042463] mempool_init+0x38/0x50 [ 3059.046127] bioset_init+0x532/0x810 [ 3059.049846] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3059.054603] blk_alloc_queue_node+0x189/0xbf0 [ 3059.059100] blk_mq_init_queue+0x44/0xa0 [ 3059.063150] loop_add+0x2cb/0x8a0 [ 3059.066656] loop_control_ioctl+0x16c/0x480 [ 3059.070975] ? loop_lookup+0x1d0/0x1d0 [ 3059.074872] ? ksys_write+0x241/0x2a0 [ 3059.078674] ? loop_lookup+0x1d0/0x1d0 [ 3059.082568] do_vfs_ioctl+0xcdb/0x12e0 [ 3059.086631] ? lock_downgrade+0x720/0x720 [ 3059.090810] ? check_preemption_disabled+0x41/0x280 [ 3059.095821] ? ioctl_preallocate+0x200/0x200 [ 3059.100221] ? __fget+0x356/0x510 [ 3059.103691] ? do_dup2+0x450/0x450 [ 3059.107229] ? vfs_write+0x393/0x540 [ 3059.110941] ? fput+0x2b/0x190 [ 3059.114153] ksys_ioctl+0x9b/0xc0 [ 3059.117642] __x64_sys_ioctl+0x6f/0xb0 [ 3059.121520] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3059.126095] do_syscall_64+0xf9/0x620 [ 3059.129905] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3059.135094] RIP: 0033:0x4665f9 06:34:28 executing program 3: r0 = socket(0xa, 0x3, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) [ 3059.138280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3059.157263] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3059.165086] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3059.172361] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3059.179619] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3059.186878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3059.194142] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:28 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1410, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 06:34:28 executing program 3: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) 06:34:28 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x1d5000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:28 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:28 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f0000000040)=0x16d) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f00000000c0)=0x80) 06:34:28 executing program 5 (fault-call:1 fault-nth:17): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:28 executing program 3: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) 06:34:28 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x100) getpgrp(0xffffffffffffffff) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000080)) 06:34:28 executing program 3: socket(0xa, 0x3, 0x3) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x800}, 0x20) 06:34:28 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r3, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r4, r5, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r4, r5, 0x3, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r5, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r4, r5, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r5, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r4, r5, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r7, r5, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r4, r5, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r4, r5, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002280)=ANY=[@ANYBLOB="78060000daffffff", @ANYRES64=r12, @ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000100008000000100010000000000000009000000000000000100000000000000ffffff7f0000000006000000000000000100000000000000e2c2000000010000250000000080010020000000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="ff0700008a3c0000000000000500000000000000f8ffffffffffffff00000000ff7f00000500000000000000030000000000000063e0000000000000080000000000000004000000fffeffff00000000000000000300000000000000010000000000000009000000000000000900000000000000828b0000000000000000008008000000050000000040000000000000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000000700000000000000060000000000000005000000000000000a000000eb0000002f6465762f6375736500000000000000040000000000000003000000000000000200000000000000070000000000000004000000db33ffff05000000000000001f0000000000000008000000000000000000000000000000080000000000000009000000000000000001000003000000ff0300000040000004000000", @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="8000000000040000000000000400000000000000060000000000000007000000070000005c2f213f2c2d5200060000000000000001000000000000005e03000000000000090000000000000008000000940000000400000000000000550000000000000005000000000000000100000000000000008000000000000004000000000000000800000001000080010400000080000007000000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="040000001800000000000000000000000000000004000000000000000b000000b80a00007b24213a2f2726ce2b2121000000000004000000000000000000000000000000e9090000000000000500000000000000ff0700000738000001000000000000000300000000000000008000000000000005000000000000001f00000000000000ff00000000000000ef210000ff7f0000ff7f000000c0000001000000", @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="ffff000001040000000000000200000000000000cbe80000000000000a000000000100002f6465762f637573650000000000000002000000000000000000000000000000070000000000000001000000000000005c030000010000000000000000000000ff01000000000000c96f0000000000000500000000000000070000000000000000000000000000000104000000000000010001000030000007000000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0600000006000000000000000000000000000000000400000000000010000000be0000002f6465762f696e7075742f6d696365000400000000000000030000000000000006000000000000000100000000000000080000000500000004000000000000000000000000000000994f0000000000003f000000000000000100000000000000530100000000000000000000001000000100ffff0040000003000000", @ANYRES32=r15, @ANYRES32=r14, @ANYBLOB="06000000ffffffff00000000030000000000000006000000000000000400000080ffffff2628292fb3e56731500f39f8598ae6fc06ca94000000000400000000000000020000000000000093668d1800000000e72a00000000000002000000000000020000000000000000d200000000000000030000000000000002000000000000000600000000000000f7ffffffffffffff060000000400000004000000006000007c0f0000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="00000000e1040000000000000300000000000000ef0000000000000010000000010000002f6465762f696e7075742f6d69636500050000000000000003000000000000007f000000000000004200000000000000ff7f000001040000040000000000000000020000000000000500000000000000750000000000000000000000000000007e0000000000000006000000ff0300000600000000c0000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b002000004000000000000000600000000000000ff0700000000000010000000030000002f6465762f696e7075742f6d69636500040000000000000002000000000000000100000000000000020000000000000006000000f9ffffff02000000000000000000000000000000ffffff7f0000000005000000000000000000000001000000ff000000000000003b08000001000000000001000000000001040000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="241d00000400000000000000020000000000000001000000000000000100000000010000a100000000000000"], 0x678) r16 = getgid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000021c0)={0x90, 0x0, r6, {0x0, 0x0, 0x1000, 0x585, 0x4, 0xfffffff8, {0x4, 0x76, 0x3, 0xffffffff00000001, 0x3, 0x0, 0x80000001, 0x8, 0xc5, 0x1000, 0x1, r13, r16, 0x0, 0x2}}}, 0x90) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r8, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r9, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r10, r11, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x7bac, r10, r11, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r11, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x3, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r10, r11, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r11, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r10, r11, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r17, r11, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffffb, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r10, r11, 0x0, 0x4e1}}, {0x3, 0x20ef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r10, r11, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) write$FUSE_ENTRY(r1, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x1, 0x0, 0x4, 0x5, 0x0, 0xfff, {0x3, 0x3, 0x6, 0x9, 0x80000001, 0xffffffff, 0xfffffffb, 0x46, 0x60000, 0x2000, 0x2, r4, r11, 0x10000, 0x8}}}, 0x90) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000020c0)={0x2, 0x5, 0x1, 'queue0\x00', 0x7}) [ 3059.461080] FAULT_INJECTION: forcing a failure. [ 3059.461080] name failslab, interval 1, probability 0, space 0, times 0 [ 3059.507303] CPU: 1 PID: 23272 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3059.515216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3059.524572] Call Trace: [ 3059.527174] dump_stack+0x1fc/0x2ef [ 3059.530821] should_fail.cold+0xa/0xf [ 3059.534630] ? setup_fault_attr+0x200/0x200 [ 3059.538965] ? lock_acquire+0x170/0x3c0 [ 3059.542947] ? mempool_free+0x370/0x370 [ 3059.547013] ? mempool_free+0x370/0x370 [ 3059.550995] __should_failslab+0x115/0x180 [ 3059.555233] should_failslab+0x5/0x10 [ 3059.559023] kmem_cache_alloc+0x277/0x370 [ 3059.563210] ? mempool_alloc+0x350/0x350 [ 3059.567273] ? mempool_free+0x370/0x370 [ 3059.571282] mempool_init_node+0x2d0/0x6c0 [ 3059.575528] ? mempool_alloc+0x350/0x350 [ 3059.579596] ? mempool_free+0x370/0x370 [ 3059.583591] mempool_init+0x38/0x50 [ 3059.587218] bioset_init+0x532/0x810 [ 3059.590926] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3059.595698] blk_alloc_queue_node+0x189/0xbf0 [ 3059.600256] blk_mq_init_queue+0x44/0xa0 [ 3059.604459] loop_add+0x2cb/0x8a0 [ 3059.607917] loop_control_ioctl+0x16c/0x480 [ 3059.612271] ? loop_lookup+0x1d0/0x1d0 [ 3059.616173] ? ksys_write+0x241/0x2a0 [ 3059.619983] ? loop_lookup+0x1d0/0x1d0 [ 3059.623904] do_vfs_ioctl+0xcdb/0x12e0 [ 3059.627793] ? lock_downgrade+0x720/0x720 [ 3059.632042] ? check_preemption_disabled+0x41/0x280 [ 3059.637152] ? ioctl_preallocate+0x200/0x200 [ 3059.641681] ? __fget+0x356/0x510 [ 3059.645152] ? do_dup2+0x450/0x450 [ 3059.648720] ? vfs_write+0x393/0x540 [ 3059.654089] ? fput+0x2b/0x190 [ 3059.657284] ksys_ioctl+0x9b/0xc0 [ 3059.660739] __x64_sys_ioctl+0x6f/0xb0 [ 3059.664627] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3059.669215] do_syscall_64+0xf9/0x620 [ 3059.673018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3059.678199] RIP: 0033:0x4665f9 [ 3059.681387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3059.700403] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:34:28 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0xfffffffd}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) 06:34:28 executing program 3: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) [ 3059.708200] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3059.715458] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3059.723951] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3059.731207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3059.738475] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:28 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:28 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x30a43, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x480000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x93700, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000100)=0xffff5626) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 06:34:28 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000041400022abd7000fcdbdf250800010001000000080001000100000008000100000000000800010002000000080001000180000008000100000000005880f47ba32652f50fcdeadf38ea65"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0xbc8c09bfb8307898) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) 06:34:28 executing program 5 (fault-call:1 fault-nth:18): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:28 executing program 3: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) 06:34:28 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1404, 0x300, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}]}, 0x48}}, 0x24000051) 06:34:28 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) socketpair(0x3, 0x80000, 0xfffffffc, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x140c, 0x100, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x844) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1409, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000011) 06:34:28 executing program 3: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, 0x0, 0x0) [ 3059.965981] FAULT_INJECTION: forcing a failure. [ 3059.965981] name failslab, interval 1, probability 0, space 0, times 0 [ 3059.992876] CPU: 0 PID: 23304 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3060.000789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3060.010233] Call Trace: 06:34:28 executing program 3: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x20) 06:34:28 executing program 3: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x20) [ 3060.012836] dump_stack+0x1fc/0x2ef [ 3060.016568] should_fail.cold+0xa/0xf [ 3060.020382] ? setup_fault_attr+0x200/0x200 [ 3060.024738] ? lock_acquire+0x170/0x3c0 [ 3060.028726] __should_failslab+0x115/0x180 [ 3060.033058] should_failslab+0x5/0x10 [ 3060.036865] kmem_cache_alloc+0x277/0x370 [ 3060.041032] ? mempool_alloc+0x350/0x350 [ 3060.045096] mempool_init_node+0x2d0/0x6c0 [ 3060.049336] ? mempool_alloc+0x350/0x350 [ 3060.053480] ? mempool_free+0x370/0x370 [ 3060.057455] mempool_init+0x38/0x50 [ 3060.061093] bioset_init+0x532/0x810 06:34:28 executing program 3: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x20) [ 3060.064815] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3060.069585] blk_alloc_queue_node+0x189/0xbf0 [ 3060.074101] blk_mq_init_queue+0x44/0xa0 [ 3060.078171] loop_add+0x2cb/0x8a0 [ 3060.081638] loop_control_ioctl+0x16c/0x480 [ 3060.085962] ? loop_lookup+0x1d0/0x1d0 [ 3060.089859] ? ksys_write+0x241/0x2a0 [ 3060.093670] ? loop_lookup+0x1d0/0x1d0 [ 3060.097572] do_vfs_ioctl+0xcdb/0x12e0 [ 3060.101468] ? lock_downgrade+0x720/0x720 [ 3060.105633] ? check_preemption_disabled+0x41/0x280 [ 3060.110652] ? ioctl_preallocate+0x200/0x200 06:34:28 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3060.115072] ? __fget+0x356/0x510 [ 3060.118535] ? do_dup2+0x450/0x450 [ 3060.122074] ? vfs_write+0x393/0x540 [ 3060.125796] ? fput+0x2b/0x190 [ 3060.129006] ksys_ioctl+0x9b/0xc0 [ 3060.132461] __x64_sys_ioctl+0x6f/0xb0 [ 3060.136354] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3060.140942] do_syscall_64+0xf9/0x620 [ 3060.144755] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3060.149949] RIP: 0033:0x4665f9 [ 3060.153130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3060.172104] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3060.179803] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3060.187263] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3060.194609] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3060.201886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3060.209216] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:29 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:29 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x50, 0x2, 0x4, 0x7, @time={0x10000, 0x634}, {0x20, 0x40}, {0x3, 0x8}, @raw8={"f023aa183e8b775386433145"}}, {0x3, 0x2, 0x4, 0x7, @time={0x200, 0x3ff}, {0x3, 0x6}, {0x7, 0xc0}, @note={0x9, 0x7f, 0x80, 0x9, 0xc2a83d9}}, {0x9, 0xfc, 0x7, 0x7, @tick=0xffff, {0x8, 0x8}, {0x0, 0x8}, @note={0x8, 0x0, 0x80, 0x8, 0x10000}}, {0x3f, 0x3, 0x80, 0xef, @tick=0x9, {0x8, 0x37}, {0xff}, @quote={{0x2, 0x35}, 0x5, &(0x7f0000000040)={0xff, 0x4, 0xf5, 0x5, @time={0xcb6, 0xa}, {0x2, 0x81}, {0x5}, @control={0x5, 0xffff, 0x1ac}}}}, {0xff, 0x7c, 0x8, 0x4, @time={0x0, 0xb8}, {0xb0, 0x54}, {0x1, 0x9}, @quote={{0xc0, 0x4}, 0x7f, &(0x7f0000000080)={0x7, 0x1, 0xff, 0x8, @tick=0x7, {0x81, 0x1}, {0x1, 0x2}, @time=@time={0x9, 0x5}}}}, {0x40, 0x9f, 0x3, 0x7, @tick=0x2b14465, {0x2, 0x8}, {0x3f}, @control={0x5, 0x9, 0x3}}], 0xa8) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x68842, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0xde8cb93c79c6de15) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000001c0)={{0xf9, 0x8}, 'port1\x00', 0x1, 0x30000, 0x8, 0x4, 0x6, 0xff, 0x5, 0x0, 0x4, 0x1f}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r0) 06:34:29 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x0, 0x3}, 0x20) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:29 executing program 5 (fault-call:1 fault-nth:19): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:29 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:29 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:29 executing program 4: socket(0xa, 0x3, 0x3) socketpair(0x27, 0x800, 0x2000000, &(0x7f0000000000)) [ 3060.386605] FAULT_INJECTION: forcing a failure. [ 3060.386605] name failslab, interval 1, probability 0, space 0, times 0 [ 3060.414997] CPU: 1 PID: 23346 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3060.422913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3060.432282] Call Trace: 06:34:29 executing program 4: r0 = socket(0xa, 0x3, 0x3) socket(0x1d, 0x4, 0xa0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x20) 06:34:29 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r3}, 0x78) write$FUSE_INIT(r1, &(0x7f0000000300)={0x50, 0x0, r3, {0x7, 0x21, 0xfffffffb, 0x400000, 0x2, 0x2b3, 0x0, 0x2}}, 0x50) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/16, 0x10}, {&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x4, &(0x7f0000000280)=""/22, 0x16}, 0x40000002) [ 3060.434893] dump_stack+0x1fc/0x2ef [ 3060.438536] should_fail.cold+0xa/0xf [ 3060.442345] ? setup_fault_attr+0x200/0x200 [ 3060.446670] ? lock_acquire+0x170/0x3c0 [ 3060.450657] __should_failslab+0x115/0x180 [ 3060.454907] should_failslab+0x5/0x10 [ 3060.458725] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3060.463881] bdi_alloc_node+0x5c/0xd0 [ 3060.467694] blk_alloc_queue_node+0x1af/0xbf0 [ 3060.472205] blk_mq_init_queue+0x44/0xa0 [ 3060.476277] loop_add+0x2cb/0x8a0 [ 3060.479741] loop_control_ioctl+0x16c/0x480 [ 3060.484076] ? loop_lookup+0x1d0/0x1d0 [ 3060.487975] ? ksys_write+0x241/0x2a0 [ 3060.491786] ? loop_lookup+0x1d0/0x1d0 [ 3060.495689] do_vfs_ioctl+0xcdb/0x12e0 [ 3060.499583] ? lock_downgrade+0x720/0x720 [ 3060.503824] ? check_preemption_disabled+0x41/0x280 [ 3060.508854] ? ioctl_preallocate+0x200/0x200 [ 3060.513266] ? __fget+0x356/0x510 [ 3060.516721] ? do_dup2+0x450/0x450 [ 3060.520331] ? vfs_write+0x393/0x540 [ 3060.524049] ? fput+0x2b/0x190 [ 3060.527236] ksys_ioctl+0x9b/0xc0 [ 3060.530728] __x64_sys_ioctl+0x6f/0xb0 [ 3060.534614] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3060.539186] do_syscall_64+0xf9/0x620 [ 3060.542980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3060.548201] RIP: 0033:0x4665f9 [ 3060.551541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3060.570436] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3060.578137] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 06:34:29 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:29 executing program 0: ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000080)={0x401, 0x98e, 0x5, 0x4, 0x3, 0x4}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x4, 0x2, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10, 0x800) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) [ 3060.585411] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3060.592685] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3060.599949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3060.607211] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:29 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 06:34:29 executing program 5 (fault-call:1 fault-nth:20): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:29 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000200)) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x1401, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008004}, 0xc4) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1410, 0x300, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x24008040) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}) 06:34:29 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:29 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x701640, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000002680)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000000)={0x2, 0x9, 0x0, 'queue0\x00', 0x8}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f00000086c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r8, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10001, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r9, r10, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r9, r10, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r10, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r9, r10, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r10, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r9, r10, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r11, r10, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r9, r10, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x1f, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r9, r10, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000400)={0xa0, 0xfffffffffffffff5, r6, {{0x0, 0x0, 0x7, 0xfffffffffffffff8, 0x5, 0x6, {0x3, 0x2, 0x0, 0x7, 0x9, 0x8001, 0x2, 0xb76, 0x3, 0xa000, 0x8, r4, r10, 0x1}}, {0x0, 0x16}}}, 0xa0) write$FUSE_ATTR(r2, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r3}, 0x78) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1f, 0xff, 0x0, 'queue0\x00', 0x81}) write$FUSE_POLL(r1, &(0x7f00000002c0)={0x18, 0xfffffffffffffff5, r3, {0x90}}, 0x18) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r12, 0x5403) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, 0x1) 06:34:29 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000000114000126bd7020fcdbdf25080001000100000008000100000100000000000800010002000000080001000000000008000100020000000800010000000000000000000090020c0053299ca7ef6291165b2e610b1cf0b571fdc3e513d4d67aeb1290451419423d6618f5d00cc272b3d831191e4538d66ddf43f50111a4c92c8a43bdf2dc2b2b0f1c589c08f0711f9885d1bc8693d1aaa1e25546e024ab80b15bf8d8a61bfc206a48275e5c6d57c3c8d16fe77b2a6f3666b582752071"], 0x48}, 0x1, 0x0, 0x0, 0x51}, 0x20000801) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000003c0)={{0xe0, 0x1}, {0x0, 0xfd}, 0x1, 0x6, 0x3f}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x101000, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000380)={0x6, &(0x7f0000000000)=[{}, {@fixed}, {@fixed}, {}, {@none}, {@none}]}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xa, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x993}, [@map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb60}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x7}, @generic={0x2, 0x1, 0x2, 0x8001, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f00000005c0)='syzkaller\x00', 0xff, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0xa, 0x146, 0x9}, 0x10, 0x0, r5}, 0x78) [ 3060.820333] FAULT_INJECTION: forcing a failure. [ 3060.820333] name failslab, interval 1, probability 0, space 0, times 0 [ 3060.842147] CPU: 0 PID: 23379 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3060.850074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3060.859434] Call Trace: [ 3060.862041] dump_stack+0x1fc/0x2ef [ 3060.865684] should_fail.cold+0xa/0xf [ 3060.869501] ? setup_fault_attr+0x200/0x200 [ 3060.873823] ? lock_acquire+0x170/0x3c0 [ 3060.877792] __should_failslab+0x115/0x180 [ 3060.882037] should_failslab+0x5/0x10 [ 3060.885838] kmem_cache_alloc_trace+0x284/0x380 [ 3060.890511] wb_congested_get_create+0x180/0x3a0 [ 3060.895268] wb_init+0x4a7/0x770 [ 3060.898626] ? __raw_spin_lock_init+0x28/0x100 [ 3060.903200] bdi_init+0x29c/0x410 [ 3060.906651] bdi_alloc_node+0x76/0xd0 [ 3060.910469] blk_alloc_queue_node+0x1af/0xbf0 [ 3060.914979] blk_mq_init_queue+0x44/0xa0 [ 3060.919040] loop_add+0x2cb/0x8a0 [ 3060.922499] loop_control_ioctl+0x16c/0x480 [ 3060.926826] ? loop_lookup+0x1d0/0x1d0 [ 3060.930724] ? ksys_write+0x241/0x2a0 [ 3060.934530] ? loop_lookup+0x1d0/0x1d0 [ 3060.938428] do_vfs_ioctl+0xcdb/0x12e0 [ 3060.942321] ? lock_downgrade+0x720/0x720 [ 3060.946469] ? check_preemption_disabled+0x41/0x280 [ 3060.951498] ? ioctl_preallocate+0x200/0x200 [ 3060.955919] ? __fget+0x356/0x510 [ 3060.959370] ? do_dup2+0x450/0x450 [ 3060.962942] ? vfs_write+0x393/0x540 [ 3060.966653] ? fput+0x2b/0x190 [ 3060.969854] ksys_ioctl+0x9b/0xc0 [ 3060.973317] __x64_sys_ioctl+0x6f/0xb0 [ 3060.977205] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3060.981787] do_syscall_64+0xf9/0x620 [ 3060.985590] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3060.990779] RIP: 0033:0x4665f9 [ 3060.993977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3061.012883] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3061.020606] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3061.027872] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3061.035137] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3061.042412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3061.049690] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:29 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x1402, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000090}, 0x81) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000000)) 06:34:29 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, r1, {0x0, 0x2}}, 0x20) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000000)=0x9) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x1) 06:34:29 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:30 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/132, 0x84}, {&(0x7f00000001c0)=""/222, 0xde}], 0x2, &(0x7f00000002c0)=""/191, 0xbf}, 0x31) 06:34:30 executing program 5 (fault-call:1 fault-nth:21): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:30 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) 06:34:30 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) socketpair(0x9, 0x6, 0xa6f, &(0x7f0000000000)={0xffffffffffffffff}) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10, 0x80800) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000000), 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000100)={r2, r3, 0x9, 0x4b, &(0x7f0000000080)="b34d5b1e8a5b4b015b17ba0468b0b94294ae8e06a3baf5053b9b30b33fba3cf233ae7545cbc5d5f68da133d07b00d608214c10035b8519e40848cdb298a11b3e27373f2319d1f566318592", 0x69, 0xa9, 0x7, 0x9, 0x400, 0x1, 0xf4, 'syz1\x00'}) 06:34:30 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r2}, 0x78) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r4, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r5, r6, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r5, r6, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r6, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r5, r6, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r6, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r5, r6, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r7, r6, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r5, r6, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r5, r6, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0xad5dd6922d986997, r2, {0x1, 0x2, 0xff, 0x1, 0x0, 0x1, {0x1, 0x1, 0x0, 0x1ff, 0x20, 0x5, 0x10000, 0x3480, 0x59c50b94, 0xa000, 0x100, r7, 0xffffffffffffffff, 0xfffffff8, 0x5}}}, 0x90) 06:34:30 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3061.365270] FAULT_INJECTION: forcing a failure. [ 3061.365270] name failslab, interval 1, probability 0, space 0, times 0 [ 3061.382707] CPU: 0 PID: 23428 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3061.390621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3061.399979] Call Trace: [ 3061.402575] dump_stack+0x1fc/0x2ef [ 3061.406207] should_fail.cold+0xa/0xf [ 3061.410006] ? setup_fault_attr+0x200/0x200 [ 3061.414330] ? lock_acquire+0x170/0x3c0 [ 3061.418301] __should_failslab+0x115/0x180 [ 3061.422711] should_failslab+0x5/0x10 [ 3061.426517] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3061.431614] bdi_alloc_node+0x5c/0xd0 [ 3061.435407] blk_alloc_queue_node+0x1af/0xbf0 [ 3061.439906] blk_mq_init_queue+0x44/0xa0 [ 3061.443968] loop_add+0x2cb/0x8a0 [ 3061.447423] loop_control_ioctl+0x16c/0x480 [ 3061.451746] ? loop_lookup+0x1d0/0x1d0 [ 3061.455630] ? ksys_write+0x241/0x2a0 [ 3061.459424] ? loop_lookup+0x1d0/0x1d0 [ 3061.463316] do_vfs_ioctl+0xcdb/0x12e0 [ 3061.467196] ? lock_downgrade+0x720/0x720 [ 3061.471331] ? check_preemption_disabled+0x41/0x280 [ 3061.476375] ? ioctl_preallocate+0x200/0x200 [ 3061.480781] ? __fget+0x356/0x510 [ 3061.484345] ? do_dup2+0x450/0x450 [ 3061.487866] ? vfs_write+0x393/0x540 [ 3061.491562] ? fput+0x2b/0x190 [ 3061.494743] ksys_ioctl+0x9b/0xc0 [ 3061.498182] __x64_sys_ioctl+0x6f/0xb0 [ 3061.502063] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3061.506681] do_syscall_64+0xf9/0x620 [ 3061.510499] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3061.515688] RIP: 0033:0x4665f9 [ 3061.518869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3061.537772] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3061.545480] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3061.552739] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 06:34:30 executing program 4: r0 = socket(0xa, 0x3, 0x3) socket(0x29, 0xa, 0x8) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3061.559999] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3061.567291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3061.574627] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:30 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:30 executing program 5 (fault-call:1 fault-nth:22): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:30 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0xa6180, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0x6, 0x2, {0x3, 0x1, 0xffffffff, 0x0, 0x435}, 0xff}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r2, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r3, r4, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r3, r4, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r4, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r3, r4, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r4, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r3, r4, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r5, r4, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r3, r4, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r3, r4, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r6, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r7, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r8, r9, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r8, r9, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r9, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r8, r9, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r9, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r8, r9, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r10, r9, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r8, r9, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r8, r9, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) write$FUSE_ATTR(r1, &(0x7f00000002c0)={0x78, 0x0, 0x0, {0x8, 0x2, 0x0, {0x3, 0x1, 0x6b5e9ff, 0x7a2, 0x10001, 0x7fff, 0x8001, 0x7, 0x1, 0xc000, 0x80, r3, r9, 0x2, 0x8}}}, 0x78) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x408001, 0x0) write$FUSE_OPEN(r11, 0x0, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1404, 0x20, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000801}, 0x8898) r13 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x480800) ioctl$VHOST_NET_SET_BACKEND(r11, 0x4008af30, &(0x7f0000000080)={0x1, r13}) 06:34:30 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x94082, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x105800) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000b14e2fe2abd7000fbdbdf2508003f0004000000080003000100000008003f0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000070}, 0x0) getsockname(r0, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:30 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) 06:34:30 executing program 4: r0 = socket(0xa, 0x3, 0xb5c) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3061.736829] FAULT_INJECTION: forcing a failure. [ 3061.736829] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3061.748765] CPU: 1 PID: 23458 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3061.756825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3061.766184] Call Trace: [ 3061.768775] dump_stack+0x1fc/0x2ef [ 3061.772406] should_fail.cold+0xa/0xf [ 3061.776299] ? check_preemption_disabled+0x41/0x280 [ 3061.781679] ? setup_fault_attr+0x200/0x200 [ 3061.786009] __alloc_pages_nodemask+0x239/0x2890 [ 3061.790846] ? __lock_acquire+0x6de/0x3ff0 [ 3061.795096] ? mempool_init+0x38/0x50 [ 3061.798911] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3061.803842] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3061.808760] ? __x64_sys_ioctl+0x6f/0xb0 [ 3061.812843] ? do_syscall_64+0xf9/0x620 [ 3061.817000] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3061.822386] ? ____cache_alloc_node+0xf4/0x1d0 [ 3061.826979] ? ____cache_alloc_node+0x156/0x1d0 [ 3061.831828] cache_grow_begin+0xa4/0x8a0 [ 3061.835888] ? check_preemption_disabled+0x41/0x280 [ 3061.840896] ____cache_alloc_node+0x170/0x1d0 [ 3061.845393] ? check_preemption_disabled+0x41/0x280 [ 3061.850403] kmem_cache_alloc+0x1e4/0x370 [ 3061.854549] ? mempool_alloc+0x350/0x350 [ 3061.858606] mempool_init_node+0x2d0/0x6c0 [ 3061.862833] ? mempool_alloc+0x350/0x350 [ 3061.866964] ? mempool_free+0x370/0x370 [ 3061.870921] mempool_init+0x38/0x50 [ 3061.874547] bioset_init+0x532/0x810 [ 3061.878253] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3061.883110] blk_alloc_queue_node+0x189/0xbf0 [ 3061.887622] blk_mq_init_queue+0x44/0xa0 [ 3061.891694] loop_add+0x2cb/0x8a0 [ 3061.895149] loop_control_ioctl+0x16c/0x480 [ 3061.899474] ? loop_lookup+0x1d0/0x1d0 [ 3061.903371] ? ksys_write+0x241/0x2a0 [ 3061.907184] ? loop_lookup+0x1d0/0x1d0 [ 3061.911077] do_vfs_ioctl+0xcdb/0x12e0 [ 3061.914954] ? lock_downgrade+0x720/0x720 [ 3061.919105] ? check_preemption_disabled+0x41/0x280 [ 3061.924132] ? ioctl_preallocate+0x200/0x200 [ 3061.928548] ? __fget+0x356/0x510 [ 3061.932010] ? do_dup2+0x450/0x450 [ 3061.935537] ? vfs_write+0x393/0x540 [ 3061.939241] ? fput+0x2b/0x190 [ 3061.942438] ksys_ioctl+0x9b/0xc0 [ 3061.945899] __x64_sys_ioctl+0x6f/0xb0 [ 3061.949795] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3061.954407] do_syscall_64+0xf9/0x620 [ 3061.958220] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3061.963400] RIP: 0033:0x4665f9 [ 3061.966631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3061.985569] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3061.993264] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3062.000533] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3062.007814] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3062.015092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3062.022456] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:30 executing program 5 (fault-call:1 fault-nth:23): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:30 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x40001, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000000)) 06:34:30 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) socket(0x1, 0xa, 0x8) 06:34:31 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:31 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) read$FUSE(r1, &(0x7f0000000d00)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r4, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r5, r6, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r5, r6, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r6, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r5, r6, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r6, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r5, r6, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4f99, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r7, r6, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r5, r6, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x5, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r5, r6, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) write$FUSE_ATTR(r1, &(0x7f0000000000)={0x78, 0x0, r2, {0x9, 0x1, 0x0, {0x5, 0x401, 0x10000, 0xcd4f, 0x400, 0x1, 0x0, 0x9, 0x20, 0x8000, 0x1f, 0xee00, r6, 0x10001, 0x81}}}, 0x78) 06:34:31 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) [ 3062.162844] FAULT_INJECTION: forcing a failure. [ 3062.162844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3062.214930] CPU: 0 PID: 23489 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3062.222846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3062.232208] Call Trace: [ 3062.234808] dump_stack+0x1fc/0x2ef [ 3062.238451] should_fail.cold+0xa/0xf [ 3062.242263] ? lock_acquire+0x170/0x3c0 [ 3062.246252] ? setup_fault_attr+0x200/0x200 [ 3062.250598] __alloc_pages_nodemask+0x239/0x2890 [ 3062.255371] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3062.260401] ? __alloc_pages_nodemask+0x1b43/0x2890 [ 3062.265443] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3062.270326] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3062.275185] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3062.280044] ? __x64_sys_ioctl+0x6f/0xb0 [ 3062.284116] ? do_syscall_64+0xf9/0x620 [ 3062.288107] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3062.293486] ? ____cache_alloc_node+0xf4/0x1d0 [ 3062.298093] ? mark_held_locks+0xa6/0xf0 [ 3062.302166] ? ____cache_alloc_node+0x156/0x1d0 [ 3062.306844] ? cache_grow_begin+0x64/0x8a0 [ 3062.311093] cache_grow_begin+0xa4/0x8a0 [ 3062.315172] fallback_alloc+0x213/0x2e0 [ 3062.319170] kmem_cache_alloc+0x1e4/0x370 [ 3062.323329] ? mempool_alloc+0x350/0x350 [ 3062.327404] mempool_init_node+0x2d0/0x6c0 [ 3062.331660] ? mempool_alloc+0x350/0x350 [ 3062.335729] ? mempool_free+0x370/0x370 [ 3062.339707] mempool_init+0x38/0x50 [ 3062.343344] bioset_init+0x532/0x810 [ 3062.347073] ? kmem_cache_alloc_node+0x351/0x3b0 [ 3062.351848] blk_alloc_queue_node+0x189/0xbf0 [ 3062.356365] blk_mq_init_queue+0x44/0xa0 [ 3062.360437] loop_add+0x2cb/0x8a0 06:34:31 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:31 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3062.363900] loop_control_ioctl+0x16c/0x480 [ 3062.368230] ? loop_lookup+0x1d0/0x1d0 [ 3062.372124] ? ksys_write+0x241/0x2a0 [ 3062.375939] ? loop_lookup+0x1d0/0x1d0 [ 3062.379839] do_vfs_ioctl+0xcdb/0x12e0 [ 3062.383742] ? lock_downgrade+0x720/0x720 [ 3062.387904] ? check_preemption_disabled+0x41/0x280 [ 3062.392933] ? ioctl_preallocate+0x200/0x200 [ 3062.397362] ? __fget+0x356/0x510 [ 3062.400829] ? do_dup2+0x450/0x450 [ 3062.404385] ? vfs_write+0x393/0x540 [ 3062.408114] ? fput+0x2b/0x190 [ 3062.411349] ksys_ioctl+0x9b/0xc0 06:34:31 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3062.414809] __x64_sys_ioctl+0x6f/0xb0 [ 3062.418707] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3062.423333] do_syscall_64+0xf9/0x620 [ 3062.427148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3062.432345] RIP: 0033:0x4665f9 [ 3062.435545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3062.454450] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:34:31 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) r2 = socket(0x6, 0x80000, 0x0) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x102, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) socket$nl_rdma(0x10, 0x3, 0x14) 06:34:31 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10, 0x0) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3062.462168] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3062.469435] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3062.476713] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3062.483989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3062.491265] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:31 executing program 5 (fault-call:1 fault-nth:24): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:31 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:31 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000000)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{@none}]}) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:34:31 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010101}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x3004c001) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140b, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048000}, 0x4000000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) read$FUSE(r2, &(0x7f0000000d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000200)={0xa0, 0x0, r3, {{0x4, 0x2, 0xfff, 0xff, 0x9, 0x8, {0x5, 0x1, 0x0, 0x800, 0x0, 0x20, 0xfffffffe, 0x9, 0x8, 0x8000, 0x4, 0xffffffffffffffff, 0xee01, 0x5, 0x8}}, {0x0, 0x19}}}, 0xa0) 06:34:31 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, 0x0) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:31 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:31 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00001c00c43ac908e9f4cb9580e29572e5bce8a4999e3be623684847e57e5d3d1298c36002a4f6a4efbc553c16de593f3ded3fdb73426e73ead4ac47a05361c812688555025cabbbca418de4203d0013fb2f1506e15a29c022c04167a6c36fe4118048ef121611", @ANYRES16=0x0, @ANYBLOB="7e402dbd7000fddbdf250600000006001b004e23000006001b004e200000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40600c4) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) [ 3062.742688] FAULT_INJECTION: forcing a failure. [ 3062.742688] name failslab, interval 1, probability 0, space 0, times 0 [ 3062.772301] CPU: 0 PID: 23529 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3062.780228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3062.789599] Call Trace: [ 3062.792190] dump_stack+0x1fc/0x2ef [ 3062.795823] should_fail.cold+0xa/0xf [ 3062.799647] ? setup_fault_attr+0x200/0x200 [ 3062.803976] ? lock_acquire+0x170/0x3c0 [ 3062.807971] __should_failslab+0x115/0x180 [ 3062.812248] should_failslab+0x5/0x10 [ 3062.816151] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3062.821269] blkg_alloc+0x92/0x630 [ 3062.824821] blkcg_init_queue+0x24/0x540 [ 3062.828903] blk_alloc_queue_node+0x7d0/0xbf0 [ 3062.833412] blk_mq_init_queue+0x44/0xa0 [ 3062.837498] loop_add+0x2cb/0x8a0 [ 3062.840954] loop_control_ioctl+0x16c/0x480 [ 3062.845272] ? loop_lookup+0x1d0/0x1d0 [ 3062.849170] ? ksys_write+0x241/0x2a0 [ 3062.852962] ? loop_lookup+0x1d0/0x1d0 [ 3062.856860] do_vfs_ioctl+0xcdb/0x12e0 [ 3062.860755] ? lock_downgrade+0x720/0x720 [ 3062.864901] ? check_preemption_disabled+0x41/0x280 [ 3062.870015] ? ioctl_preallocate+0x200/0x200 [ 3062.874440] ? __fget+0x356/0x510 [ 3062.877899] ? do_dup2+0x450/0x450 [ 3062.881435] ? vfs_write+0x393/0x540 [ 3062.885148] ? fput+0x2b/0x190 [ 3062.888342] ksys_ioctl+0x9b/0xc0 [ 3062.891804] __x64_sys_ioctl+0x6f/0xb0 [ 3062.895694] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3062.900283] do_syscall_64+0xf9/0x620 [ 3062.904095] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3062.909287] RIP: 0033:0x4665f9 [ 3062.912484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3062.931381] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:34:31 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r1, 0x80044dfd, &(0x7f0000000000)) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3062.939077] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3062.946336] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3062.953595] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3062.960861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3062.968427] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:31 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000080)=@xdp, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/127, 0x7f}, {&(0x7f0000000180)=""/86, 0x56}, {&(0x7f0000000200)=""/125, 0x7d}, {&(0x7f0000000280)=""/61, 0x3d}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/251, 0xfb}, {&(0x7f0000001480)=""/59, 0x3b}], 0x8, &(0x7f0000001540)=""/103, 0x67}, 0x40000040) 06:34:31 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x440000) getpeername$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x20) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x7fff, 0x0, {0x2, 0x0, 0x4, 0x1, 0xffffffff}, 0x101}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)={0x0, 0x4, 0x4, 0x2, 0x1f, {}, {0x1, 0xc, 0x0, 0x4, 0x20, 0x1, "d29af5fc"}, 0x2, 0x2, @fd=r0, 0x100, 0x0, r0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x1ff, 0x0, 0x4, 0x100000, 0x81, {}, {0xb207aa6e048b623a, 0xc, 0x81, 0x5, 0x0, 0x3, "9763419b"}, 0x400, 0x1, @planes=&(0x7f00000000c0)={0x7ff, 0x7ff, @mem_offset=0x7, 0xbc9}, 0x5a1c, 0x0, r1}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x1) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 06:34:31 executing program 5 (fault-call:1 fault-nth:25): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:31 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:31 executing program 4: write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x9, 0x3, 0x4, 0x20, 0xa2f5, {}, {0x2, 0x0, 0x81, 0x3, 0x81, 0x7, "d9975557"}, 0x6, 0x1, @offset=0xff, 0xfffffffa}) r0 = socket(0xa, 0x2, 0x3) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x3) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x2) 06:34:31 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:31 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x400000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x4}, 0x10) [ 3063.156111] FAULT_INJECTION: forcing a failure. [ 3063.156111] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.171118] CPU: 0 PID: 23570 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3063.179031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.188392] Call Trace: [ 3063.190993] dump_stack+0x1fc/0x2ef [ 3063.194634] should_fail.cold+0xa/0xf [ 3063.198444] ? setup_fault_attr+0x200/0x200 [ 3063.202775] ? lock_acquire+0x170/0x3c0 [ 3063.206763] __should_failslab+0x115/0x180 [ 3063.211003] should_failslab+0x5/0x10 [ 3063.214811] kmem_cache_alloc_trace+0x284/0x380 [ 3063.219495] blk_iolatency_init+0x47/0x2d0 [ 3063.223745] blkcg_init_queue+0x1c1/0x540 [ 3063.227908] blk_alloc_queue_node+0x7d0/0xbf0 [ 3063.232421] blk_mq_init_queue+0x44/0xa0 [ 3063.236499] loop_add+0x2cb/0x8a0 [ 3063.239967] loop_control_ioctl+0x16c/0x480 [ 3063.244485] ? loop_lookup+0x1d0/0x1d0 [ 3063.248418] ? ksys_write+0x241/0x2a0 [ 3063.252219] ? loop_lookup+0x1d0/0x1d0 [ 3063.256121] do_vfs_ioctl+0xcdb/0x12e0 [ 3063.260110] ? lock_downgrade+0x720/0x720 [ 3063.264280] ? check_preemption_disabled+0x41/0x280 [ 3063.269311] ? ioctl_preallocate+0x200/0x200 [ 3063.273733] ? __fget+0x356/0x510 [ 3063.277204] ? do_dup2+0x450/0x450 [ 3063.280740] ? vfs_write+0x393/0x540 [ 3063.284458] ? fput+0x2b/0x190 [ 3063.287666] ksys_ioctl+0x9b/0xc0 [ 3063.291130] __x64_sys_ioctl+0x6f/0xb0 [ 3063.295023] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3063.299607] do_syscall_64+0xf9/0x620 [ 3063.303418] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3063.308615] RIP: 0033:0x4665f9 [ 3063.311812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.330718] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3063.338448] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3063.345715] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 06:34:32 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getuid() ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x84020) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x2, 0x8}, 'port1\x00', 0x52, 0x8, 0x3, 0x7, 0x800, 0x0, 0x5}) 06:34:32 executing program 4: r0 = socket(0xa, 0x3, 0x3) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x3, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r3, 0x29, 0x7, 0x6, 0x3f, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x700, 0x7, 0x80000000, 0xe9}}) [ 3063.352986] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.360261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3063.367544] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:32 executing program 5 (fault-call:1 fault-nth:26): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:32 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0xce80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) getgid() 06:34:32 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:32 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) [ 3063.508565] FAULT_INJECTION: forcing a failure. [ 3063.508565] name failslab, interval 1, probability 0, space 0, times 0 06:34:32 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x9, 0xffff5237, 0xae, 0x3, 0x1258, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x40) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1409, 0x300, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48805}, 0x20000000) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 06:34:32 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000380)={0x2, 0x0, 0x1, @discrete={0xe0e, 0xb0000000}}) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000080)=@ax25={{0x3, @null}, [@default, @default, @null, @default, @netrom, @netrom, @netrom, @rose]}, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/182, 0xb6}, {&(0x7f00000001c0)=""/211, 0xd3}], 0x2, &(0x7f00000002c0)=""/107, 0x6b}, 0x40000000) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x20) connect$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x400, @empty, 0x1, 0x1}, 0x20) 06:34:32 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1404, 0x200, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x40084) [ 3063.593060] CPU: 0 PID: 23600 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3063.601014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.610376] Call Trace: [ 3063.612972] dump_stack+0x1fc/0x2ef [ 3063.616598] should_fail.cold+0xa/0xf [ 3063.620404] ? setup_fault_attr+0x200/0x200 [ 3063.624734] ? lock_acquire+0x170/0x3c0 [ 3063.628723] __should_failslab+0x115/0x180 [ 3063.632968] should_failslab+0x5/0x10 [ 3063.636776] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3063.641896] ? iolatency_pd_init+0x6f0/0x6f0 [ 3063.646317] iolatency_pd_alloc+0x6e/0x120 [ 3063.650565] blkcg_activate_policy+0x120/0x5d0 [ 3063.655158] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3063.660194] blk_iolatency_init+0x123/0x2d0 [ 3063.664616] blkcg_init_queue+0x1c1/0x540 [ 3063.669218] blk_alloc_queue_node+0x7d0/0xbf0 [ 3063.673724] blk_mq_init_queue+0x44/0xa0 [ 3063.677807] loop_add+0x2cb/0x8a0 [ 3063.681275] loop_control_ioctl+0x16c/0x480 [ 3063.685609] ? loop_lookup+0x1d0/0x1d0 [ 3063.689515] ? ksys_write+0x241/0x2a0 [ 3063.693413] ? loop_lookup+0x1d0/0x1d0 [ 3063.697313] do_vfs_ioctl+0xcdb/0x12e0 [ 3063.701210] ? lock_downgrade+0x720/0x720 [ 3063.705795] ? check_preemption_disabled+0x41/0x280 [ 3063.710927] ? ioctl_preallocate+0x200/0x200 [ 3063.715348] ? __fget+0x356/0x510 [ 3063.718811] ? do_dup2+0x450/0x450 [ 3063.722361] ? vfs_write+0x393/0x540 [ 3063.726078] ? fput+0x2b/0x190 [ 3063.729266] ksys_ioctl+0x9b/0xc0 [ 3063.732744] __x64_sys_ioctl+0x6f/0xb0 [ 3063.736654] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3063.741244] do_syscall_64+0xf9/0x620 [ 3063.745065] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3063.750265] RIP: 0033:0x4665f9 [ 3063.753461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.772381] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3063.780115] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3063.787392] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3063.794667] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.801950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3063.809235] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:32 executing program 5 (fault-call:1 fault-nth:27): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:32 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:32 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) 06:34:32 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3063.957030] FAULT_INJECTION: forcing a failure. [ 3063.957030] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.968524] CPU: 0 PID: 23630 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3063.976503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3063.985874] Call Trace: [ 3063.988478] dump_stack+0x1fc/0x2ef [ 3063.992130] should_fail.cold+0xa/0xf [ 3063.995945] ? setup_fault_attr+0x200/0x200 [ 3064.000292] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3064.005342] __should_failslab+0x115/0x180 [ 3064.009704] should_failslab+0x5/0x10 [ 3064.013630] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 3064.018662] iolatency_pd_alloc+0x6e/0x120 [ 3064.022907] ? iolatency_pd_init+0x6f0/0x6f0 [ 3064.027331] blkcg_activate_policy+0x249/0x5d0 [ 3064.031933] blk_iolatency_init+0x123/0x2d0 [ 3064.036280] blkcg_init_queue+0x1c1/0x540 [ 3064.040473] blk_alloc_queue_node+0x7d0/0xbf0 [ 3064.044985] blk_mq_init_queue+0x44/0xa0 [ 3064.049062] loop_add+0x2cb/0x8a0 [ 3064.052535] loop_control_ioctl+0x16c/0x480 06:34:32 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) socket$inet_udp(0x2, 0x2, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x800) [ 3064.056931] ? loop_lookup+0x1d0/0x1d0 [ 3064.060847] ? ksys_write+0x241/0x2a0 [ 3064.064667] ? loop_lookup+0x1d0/0x1d0 [ 3064.068574] do_vfs_ioctl+0xcdb/0x12e0 [ 3064.072527] ? lock_downgrade+0x720/0x720 [ 3064.076693] ? check_preemption_disabled+0x41/0x280 [ 3064.081726] ? ioctl_preallocate+0x200/0x200 [ 3064.086145] ? __fget+0x356/0x510 [ 3064.089602] ? do_dup2+0x450/0x450 [ 3064.093139] ? vfs_write+0x393/0x540 [ 3064.096846] ? fput+0x2b/0x190 [ 3064.100051] ksys_ioctl+0x9b/0xc0 [ 3064.103506] __x64_sys_ioctl+0x6f/0xb0 [ 3064.107399] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3064.111983] do_syscall_64+0xf9/0x620 [ 3064.115782] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3064.120982] RIP: 0033:0x4665f9 [ 3064.124174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.143166] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3064.150888] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 06:34:33 executing program 5 (fault-call:1 fault-nth:28): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) [ 3064.158175] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3064.165580] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.172853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3064.180131] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:33 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:33 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) 06:34:33 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x72b001, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:33 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3064.329336] FAULT_INJECTION: forcing a failure. [ 3064.329336] name failslab, interval 1, probability 0, space 0, times 0 [ 3064.365925] CPU: 1 PID: 23665 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3064.373845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3064.383446] Call Trace: [ 3064.386059] dump_stack+0x1fc/0x2ef [ 3064.389715] should_fail.cold+0xa/0xf [ 3064.393548] ? setup_fault_attr+0x200/0x200 [ 3064.397887] ? lock_acquire+0x170/0x3c0 [ 3064.401891] __should_failslab+0x115/0x180 [ 3064.406145] should_failslab+0x5/0x10 [ 3064.409956] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3064.415079] ? iolatency_pd_init+0x6f0/0x6f0 [ 3064.419508] iolatency_pd_alloc+0x6e/0x120 [ 3064.423865] blkcg_activate_policy+0x120/0x5d0 [ 3064.428461] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3064.433487] blk_iolatency_init+0x123/0x2d0 [ 3064.437820] blkcg_init_queue+0x1c1/0x540 [ 3064.442143] blk_alloc_queue_node+0x7d0/0xbf0 [ 3064.446723] blk_mq_init_queue+0x44/0xa0 [ 3064.450792] loop_add+0x2cb/0x8a0 [ 3064.454247] loop_control_ioctl+0x16c/0x480 [ 3064.458562] ? loop_lookup+0x1d0/0x1d0 [ 3064.462441] ? ksys_write+0x241/0x2a0 [ 3064.466245] ? loop_lookup+0x1d0/0x1d0 [ 3064.470132] do_vfs_ioctl+0xcdb/0x12e0 [ 3064.474138] ? lock_downgrade+0x720/0x720 [ 3064.478291] ? check_preemption_disabled+0x41/0x280 [ 3064.483301] ? ioctl_preallocate+0x200/0x200 [ 3064.487769] ? __fget+0x356/0x510 [ 3064.491343] ? do_dup2+0x450/0x450 [ 3064.494873] ? vfs_write+0x393/0x540 [ 3064.498588] ? fput+0x2b/0x190 [ 3064.501782] ksys_ioctl+0x9b/0xc0 [ 3064.505226] __x64_sys_ioctl+0x6f/0xb0 [ 3064.509104] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3064.513679] do_syscall_64+0xf9/0x620 [ 3064.517477] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3064.522660] RIP: 0033:0x4665f9 [ 3064.526048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.544954] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3064.552697] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3064.559969] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3064.567232] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.574492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3064.581782] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:33 executing program 4: r0 = socket(0xa, 0x3, 0x3) socket(0x2c, 0xa, 0x8) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x20) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) 06:34:33 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x8001, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r1) 06:34:33 executing program 5 (fault-call:1 fault-nth:29): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:33 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:33 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x581781, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) 06:34:33 executing program 1: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3064.727666] FAULT_INJECTION: forcing a failure. [ 3064.727666] name failslab, interval 1, probability 0, space 0, times 0 [ 3064.746061] CPU: 1 PID: 23690 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3064.753983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3064.763349] Call Trace: [ 3064.765951] dump_stack+0x1fc/0x2ef [ 3064.769655] should_fail.cold+0xa/0xf [ 3064.773476] ? setup_fault_attr+0x200/0x200 06:34:33 executing program 4: r0 = socket(0xa, 0x3, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000080)={0x6, 0x2, {0x3, 0x1, 0x4, 0x2, 0x6}, 0xd3}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xff}, 0x20) 06:34:33 executing program 4: socket(0x3, 0xa, 0x20000003) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xfffffffc, 0x4}, 0x20) [ 3064.777856] ? lock_acquire+0x170/0x3c0 [ 3064.781869] __should_failslab+0x115/0x180 [ 3064.786121] should_failslab+0x5/0x10 [ 3064.789939] kmem_cache_alloc_trace+0x284/0x380 [ 3064.794625] blk_iolatency_init+0x47/0x2d0 [ 3064.798878] blkcg_init_queue+0x1c1/0x540 [ 3064.803046] blk_alloc_queue_node+0x7d0/0xbf0 [ 3064.807567] blk_mq_init_queue+0x44/0xa0 [ 3064.811638] loop_add+0x2cb/0x8a0 [ 3064.815112] loop_control_ioctl+0x16c/0x480 [ 3064.819436] ? loop_lookup+0x1d0/0x1d0 [ 3064.823419] ? ksys_write+0x241/0x2a0 06:34:33 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @private0, 0x40000}, 0x20) [ 3064.827235] ? loop_lookup+0x1d0/0x1d0 [ 3064.831137] do_vfs_ioctl+0xcdb/0x12e0 [ 3064.835042] ? lock_downgrade+0x720/0x720 [ 3064.839206] ? check_preemption_disabled+0x41/0x280 [ 3064.844239] ? ioctl_preallocate+0x200/0x200 [ 3064.848663] ? __fget+0x356/0x510 [ 3064.852266] ? do_dup2+0x450/0x450 [ 3064.855821] ? vfs_write+0x393/0x540 [ 3064.859545] ? fput+0x2b/0x190 [ 3064.862750] ksys_ioctl+0x9b/0xc0 [ 3064.866217] __x64_sys_ioctl+0x6f/0xb0 [ 3064.870115] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3064.874709] do_syscall_64+0xf9/0x620 06:34:33 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3, 0x11}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) recvmsg(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/35, 0x23}], 0x1}, 0x10000) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000000)=0x9) [ 3064.878526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3064.883725] RIP: 0033:0x4665f9 [ 3064.886926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.905839] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3064.913555] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3064.920828] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3064.928189] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.935464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3064.942739] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:33 executing program 5 (fault-call:1 fault-nth:30): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:33 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x111040, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:33 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) [ 3065.065925] FAULT_INJECTION: forcing a failure. [ 3065.065925] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.077163] CPU: 1 PID: 23733 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3065.085053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3065.094434] Call Trace: [ 3065.097048] dump_stack+0x1fc/0x2ef [ 3065.100700] should_fail.cold+0xa/0xf [ 3065.104513] ? setup_fault_attr+0x200/0x200 [ 3065.108888] ? check_preemption_disabled+0x41/0x280 [ 3065.113925] __should_failslab+0x115/0x180 [ 3065.118180] should_failslab+0x5/0x10 [ 3065.122056] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 3065.127090] throtl_pd_alloc+0x6b/0x940 [ 3065.131079] ? throtl_add_bio_tg+0x1f0/0x1f0 [ 3065.135500] blkcg_activate_policy+0x249/0x5d0 [ 3065.140153] blk_throtl_init+0x40d/0x620 [ 3065.144217] ? blk_iolatency_init+0x1b7/0x2d0 [ 3065.148721] blkcg_init_queue+0x1e3/0x540 [ 3065.152883] blk_alloc_queue_node+0x7d0/0xbf0 [ 3065.157501] blk_mq_init_queue+0x44/0xa0 [ 3065.161757] loop_add+0x2cb/0x8a0 [ 3065.165236] loop_control_ioctl+0x16c/0x480 [ 3065.169575] ? loop_lookup+0x1d0/0x1d0 [ 3065.173604] ? ksys_write+0x241/0x2a0 [ 3065.177577] ? loop_lookup+0x1d0/0x1d0 [ 3065.181486] do_vfs_ioctl+0xcdb/0x12e0 [ 3065.185393] ? lock_downgrade+0x720/0x720 [ 3065.189547] ? check_preemption_disabled+0x41/0x280 [ 3065.194572] ? ioctl_preallocate+0x200/0x200 [ 3065.198986] ? __fget+0x356/0x510 [ 3065.202520] ? do_dup2+0x450/0x450 [ 3065.206074] ? vfs_write+0x393/0x540 [ 3065.209800] ? fput+0x2b/0x190 [ 3065.213005] ksys_ioctl+0x9b/0xc0 [ 3065.216477] __x64_sys_ioctl+0x6f/0xb0 [ 3065.220373] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3065.224960] do_syscall_64+0xf9/0x620 [ 3065.228761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3065.233944] RIP: 0033:0x4665f9 [ 3065.237373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.256275] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3065.263976] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3065.271346] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3065.278714] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3065.286103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3065.293375] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:34 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket(0x11, 0x5, 0x400) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x128, 0x1403, 0x800, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) 06:34:34 executing program 1: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:34 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 06:34:34 executing program 5 (fault-call:1 fault-nth:31): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:34 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) [ 3065.452979] FAULT_INJECTION: forcing a failure. [ 3065.452979] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.464396] CPU: 1 PID: 23758 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3065.472278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3065.481652] Call Trace: [ 3065.484246] dump_stack+0x1fc/0x2ef [ 3065.487893] should_fail.cold+0xa/0xf [ 3065.491699] ? setup_fault_attr+0x200/0x200 [ 3065.496038] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3065.501069] __should_failslab+0x115/0x180 [ 3065.505339] should_failslab+0x5/0x10 [ 3065.509147] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 3065.514165] iolatency_pd_alloc+0x6e/0x120 [ 3065.518505] ? iolatency_pd_init+0x6f0/0x6f0 [ 3065.522925] blkcg_activate_policy+0x249/0x5d0 [ 3065.527526] blk_iolatency_init+0x123/0x2d0 [ 3065.531843] blkcg_init_queue+0x1c1/0x540 [ 3065.535988] blk_alloc_queue_node+0x7d0/0xbf0 [ 3065.540488] blk_mq_init_queue+0x44/0xa0 [ 3065.544544] loop_add+0x2cb/0x8a0 [ 3065.547998] loop_control_ioctl+0x16c/0x480 [ 3065.552333] ? loop_lookup+0x1d0/0x1d0 [ 3065.556228] ? ksys_write+0x241/0x2a0 [ 3065.560042] ? loop_lookup+0x1d0/0x1d0 [ 3065.563935] do_vfs_ioctl+0xcdb/0x12e0 [ 3065.567829] ? lock_downgrade+0x720/0x720 [ 3065.571972] ? check_preemption_disabled+0x41/0x280 [ 3065.577087] ? ioctl_preallocate+0x200/0x200 [ 3065.581494] ? __fget+0x356/0x510 [ 3065.584941] ? do_dup2+0x450/0x450 [ 3065.588486] ? vfs_write+0x393/0x540 [ 3065.592211] ? fput+0x2b/0x190 [ 3065.595414] ksys_ioctl+0x9b/0xc0 [ 3065.598873] __x64_sys_ioctl+0x6f/0xb0 [ 3065.602764] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3065.607351] do_syscall_64+0xf9/0x620 [ 3065.611163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3065.616351] RIP: 0033:0x4665f9 [ 3065.619553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3065.638452] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3065.646207] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3065.653571] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3065.660850] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3065.668123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3065.675388] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:34 executing program 5 (fault-call:1 fault-nth:32): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:34 executing program 1: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3065.815299] FAULT_INJECTION: forcing a failure. [ 3065.815299] name failslab, interval 1, probability 0, space 0, times 0 [ 3065.844819] CPU: 1 PID: 23779 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3065.852736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3065.862097] Call Trace: 06:34:34 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) [ 3065.864704] dump_stack+0x1fc/0x2ef [ 3065.868351] should_fail.cold+0xa/0xf [ 3065.872170] ? setup_fault_attr+0x200/0x200 [ 3065.876505] ? lock_acquire+0x170/0x3c0 [ 3065.880506] __should_failslab+0x115/0x180 [ 3065.884754] should_failslab+0x5/0x10 [ 3065.888569] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3065.893687] blk_throtl_init+0x7c/0x620 [ 3065.897665] ? blk_iolatency_init+0x1b7/0x2d0 [ 3065.902152] blkcg_init_queue+0x1e3/0x540 [ 3065.906302] blk_alloc_queue_node+0x7d0/0xbf0 [ 3065.910798] blk_mq_init_queue+0x44/0xa0 [ 3065.914849] loop_add+0x2cb/0x8a0 [ 3065.918292] loop_control_ioctl+0x16c/0x480 [ 3065.922650] ? loop_lookup+0x1d0/0x1d0 [ 3065.926536] ? ksys_write+0x241/0x2a0 [ 3065.930384] ? loop_lookup+0x1d0/0x1d0 [ 3065.934276] do_vfs_ioctl+0xcdb/0x12e0 [ 3065.938214] ? lock_downgrade+0x720/0x720 [ 3065.942350] ? check_preemption_disabled+0x41/0x280 [ 3065.947365] ? ioctl_preallocate+0x200/0x200 [ 3065.951787] ? __fget+0x356/0x510 [ 3065.955234] ? do_dup2+0x450/0x450 [ 3065.958763] ? vfs_write+0x393/0x540 [ 3065.962488] ? fput+0x2b/0x190 [ 3065.965673] ksys_ioctl+0x9b/0xc0 [ 3065.969136] __x64_sys_ioctl+0x6f/0xb0 [ 3065.973012] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3065.978104] do_syscall_64+0xf9/0x620 [ 3065.981907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3065.987086] RIP: 0033:0x4665f9 [ 3065.990289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:34:34 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1412, 0x4, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) 06:34:34 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0xffff, 0x250002) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x700, 0xe, 0x7fff, 0x6, {{0x1b, 0x4, 0x0, 0x31, 0x6c, 0x66, 0x0, 0x3f, 0x4, 0x0, @multicast2, @private=0xa010102, {[@rr={0x7, 0x27, 0xcc, [@remote, @private=0xa010101, @local, @rand_addr=0x64010101, @multicast2, @multicast2, @multicast1, @empty, @remote]}, @rr={0x7, 0x3, 0x28}, @timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0x0, [{@local, 0x1}, {@broadcast, 0x8000}, {@local, 0x8000}, {@empty, 0x5}, {@broadcast, 0x7}]}]}}}}}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3066.009192] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3066.016983] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3066.024237] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3066.031496] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3066.038756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3066.046020] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:34 executing program 5 (fault-call:1 fault-nth:33): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:34 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x53}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80) 06:34:35 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:35 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:35 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 06:34:35 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) [ 3066.202758] FAULT_INJECTION: forcing a failure. [ 3066.202758] name failslab, interval 1, probability 0, space 0, times 0 06:34:35 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000000)=0x101) r1 = socket(0xa, 0x3, 0x3) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:35 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x50000) connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x9222, @mcast2, 0x9, 0x3}, 0x20) [ 3066.258739] CPU: 1 PID: 23811 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3066.267004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3066.276364] Call Trace: [ 3066.279017] dump_stack+0x1fc/0x2ef [ 3066.282700] should_fail.cold+0xa/0xf [ 3066.286517] ? setup_fault_attr+0x200/0x200 [ 3066.290850] ? lock_acquire+0x170/0x3c0 [ 3066.294842] __should_failslab+0x115/0x180 [ 3066.299095] should_failslab+0x5/0x10 [ 3066.303081] kmem_cache_alloc_node_trace+0x244/0x3b0 06:34:35 executing program 4: r0 = socket(0xa, 0x3, 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000080)={{0xff, 0x24}, {0x8}, 0xffffff00, 0x1, 0xa9}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x181100) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000140)={0x1f, 0xff, 0xfffffff8, 0x9, 0x5, 0xf5}) [ 3066.308201] ? throtl_add_bio_tg+0x1f0/0x1f0 [ 3066.312623] throtl_pd_alloc+0x6b/0x940 [ 3066.316696] ? throtl_add_bio_tg+0x1f0/0x1f0 [ 3066.321117] blkcg_activate_policy+0x120/0x5d0 [ 3066.325720] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3066.330745] ? init_timer_key+0x88/0x350 [ 3066.334815] blk_throtl_init+0x40d/0x620 [ 3066.338890] ? blk_iolatency_init+0x1b7/0x2d0 [ 3066.343395] blkcg_init_queue+0x1e3/0x540 [ 3066.347560] blk_alloc_queue_node+0x7d0/0xbf0 [ 3066.352082] blk_mq_init_queue+0x44/0xa0 06:34:35 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4000}, 0x20) 06:34:35 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xfffffffffffffffc, 0x0) r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) getpeername$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x20) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r3}, 0x78) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000100)={0x2, [0x0, 0x0]}) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, r3, {0x401}}, 0x18) [ 3066.356159] loop_add+0x2cb/0x8a0 [ 3066.359628] loop_control_ioctl+0x16c/0x480 [ 3066.363966] ? loop_lookup+0x1d0/0x1d0 [ 3066.367861] ? ksys_write+0x241/0x2a0 [ 3066.371667] ? loop_lookup+0x1d0/0x1d0 [ 3066.375568] do_vfs_ioctl+0xcdb/0x12e0 [ 3066.379467] ? lock_downgrade+0x720/0x720 [ 3066.383708] ? check_preemption_disabled+0x41/0x280 [ 3066.388750] ? ioctl_preallocate+0x200/0x200 [ 3066.393168] ? __fget+0x356/0x510 [ 3066.396635] ? do_dup2+0x450/0x450 [ 3066.400180] ? vfs_write+0x393/0x540 [ 3066.403994] ? fput+0x2b/0x190 06:34:35 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x20) [ 3066.407204] ksys_ioctl+0x9b/0xc0 [ 3066.410669] __x64_sys_ioctl+0x6f/0xb0 [ 3066.414564] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3066.419151] do_syscall_64+0xf9/0x620 [ 3066.422967] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3066.428159] RIP: 0033:0x4665f9 [ 3066.431356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3066.450352] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3066.458166] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3066.465445] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3066.472726] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3066.479999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3066.487259] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:35 executing program 5 (fault-call:1 fault-nth:34): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:35 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1401, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20044000) 06:34:35 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:35 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:35 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) socketpair(0x4, 0x800, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r4, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0xd00, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000811) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r5}, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:35 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x440080, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x140c, 0x20, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) [ 3066.627296] FAULT_INJECTION: forcing a failure. [ 3066.627296] name failslab, interval 1, probability 0, space 0, times 0 [ 3066.664858] CPU: 1 PID: 23856 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3066.672774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3066.682245] Call Trace: [ 3066.684857] dump_stack+0x1fc/0x2ef [ 3066.688506] should_fail.cold+0xa/0xf [ 3066.692329] ? setup_fault_attr+0x200/0x200 [ 3066.696669] ? mutex_trylock+0x1a0/0x1a0 [ 3066.700749] __should_failslab+0x115/0x180 [ 3066.705001] should_failslab+0x5/0x10 [ 3066.708795] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3066.713902] __kmalloc_node+0x38/0x70 [ 3066.717721] blk_mq_realloc_hw_ctxs+0x1d8/0x1000 [ 3066.722499] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 3066.727769] blk_mq_init_allocated_queue+0x20c/0x1300 [ 3066.733036] ? blkcg_init_queue+0x1fd/0x540 [ 3066.737357] blk_mq_init_queue+0x5c/0xa0 [ 3066.741424] loop_add+0x2cb/0x8a0 [ 3066.745029] loop_control_ioctl+0x16c/0x480 [ 3066.749369] ? loop_lookup+0x1d0/0x1d0 [ 3066.753262] ? ksys_write+0x241/0x2a0 [ 3066.757054] ? loop_lookup+0x1d0/0x1d0 [ 3066.760998] do_vfs_ioctl+0xcdb/0x12e0 [ 3066.764898] ? lock_downgrade+0x720/0x720 [ 3066.769045] ? check_preemption_disabled+0x41/0x280 [ 3066.774061] ? ioctl_preallocate+0x200/0x200 [ 3066.778481] ? __fget+0x356/0x510 [ 3066.781994] ? do_dup2+0x450/0x450 [ 3066.785534] ? vfs_write+0x393/0x540 [ 3066.789261] ? fput+0x2b/0x190 [ 3066.792462] ksys_ioctl+0x9b/0xc0 [ 3066.795921] __x64_sys_ioctl+0x6f/0xb0 [ 3066.799807] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3066.804380] do_syscall_64+0xf9/0x620 [ 3066.808202] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3066.813654] RIP: 0033:0x4665f9 [ 3066.816841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3066.835740] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3066.843517] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3066.850787] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3066.858153] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3066.865426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:34:35 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x20) getpeername$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x20) [ 3066.872800] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:35 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 06:34:35 executing program 4: r0 = socket(0x22, 0xa, 0x1) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x20) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x6400) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000100)=0x15d0000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='1', 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) connect$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1}, 0x20) 06:34:35 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:35 executing program 5 (fault-call:1 fault-nth:35): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:35 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:35 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x0, 0x7f, 0x3}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:35 executing program 4: r0 = socket(0xa, 0x3, 0x4) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:35 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:35 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000081) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 06:34:35 executing program 4: r0 = socket(0xa, 0x3, 0x3) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000080)={"673680c18cfcd439851abababde3345546102e72f6a3ed2d3cdf636f50f7", 0x3, 0x7fffffff, 0xfffffffa, [0x8, 0x9, 0x1, 0x9, 0x2, 0x0, 0x6, 0xffffffff, 0x2, 0xb6b, 0x800, 0x0, 0x2, 0x8000, 0x0, 0x10001, 0x3f, 0x7]}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000240)=0xdee4) write$FUSE_OPEN(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r4, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="af2a3e61412ada49c83ca7bbb3e8cadfee97c21cb1f21fc6f80000000000ef1a5464b73324f98fbeccdcd570efa13090c4382bf1b5e1c29eb5e99159317b3c0945143c8bd8cd709cba0db2f77a6b056e", @ANYRES16=r4, @ANYBLOB="020025bd7000fddbdf250300000005000d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x14841}, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3067.144043] FAULT_INJECTION: forcing a failure. [ 3067.144043] name failslab, interval 1, probability 0, space 0, times 0 06:34:36 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x890) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x222d00, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r6, 0x213, 0x0, 0x0, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r6, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x80}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x400}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x880) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000240)={0x4, 0x50424752, 0x3, @stepwise={0x5, 0x9, 0xbe, 0x6, 0x8, 0x4}}) getsockname$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x20) [ 3067.186127] CPU: 1 PID: 23901 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3067.194052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3067.203411] Call Trace: [ 3067.206070] dump_stack+0x1fc/0x2ef [ 3067.209720] should_fail.cold+0xa/0xf [ 3067.213533] ? setup_fault_attr+0x200/0x200 [ 3067.217862] ? __debug_object_init+0x410/0x9b0 [ 3067.222460] __should_failslab+0x115/0x180 [ 3067.226708] should_failslab+0x5/0x10 [ 3067.230520] kmem_cache_alloc_node_trace+0x244/0x3b0 06:34:36 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001d00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f0000000480)={0x18, 0x0, r1, {0x3}}, 0x18) write$FUSE_OPEN(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @vbi={0x0, 0x1, 0x0, 0x38416761, [0xfffffffc, 0x8], [0x10001], 0x2}}) r2 = socket(0xa, 0x3, 0x3) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, 0x20) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000004c0), 0x1c0) recvmsg$can_bcm(r4, &(0x7f0000000440)={&(0x7f0000000200)=@qipcrtr, 0x80, &(0x7f0000000300)=[{&(0x7f0000000500)=""/113, 0x71}, {&(0x7f0000000d00)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/202, 0xca}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000080)={0x7, 0x9, 0x6, {0xfffffffd, 0x1be47bb5}, 0x665, 0x2}) [ 3067.235641] __kmalloc_node+0x38/0x70 [ 3067.239459] blk_mq_realloc_hw_ctxs+0x568/0x1000 [ 3067.244245] blk_mq_init_allocated_queue+0x20c/0x1300 [ 3067.249450] ? blkcg_init_queue+0x1fd/0x540 [ 3067.253789] blk_mq_init_queue+0x5c/0xa0 [ 3067.257860] loop_add+0x2cb/0x8a0 [ 3067.261326] loop_control_ioctl+0x16c/0x480 [ 3067.265658] ? loop_lookup+0x1d0/0x1d0 [ 3067.269560] ? ksys_write+0x241/0x2a0 [ 3067.273370] ? loop_lookup+0x1d0/0x1d0 [ 3067.277268] do_vfs_ioctl+0xcdb/0x12e0 [ 3067.281166] ? lock_downgrade+0x720/0x720 [ 3067.285319] ? check_preemption_disabled+0x41/0x280 [ 3067.290350] ? ioctl_preallocate+0x200/0x200 [ 3067.294776] ? __fget+0x356/0x510 [ 3067.298229] ? do_dup2+0x450/0x450 [ 3067.301757] ? vfs_write+0x393/0x540 [ 3067.305455] ? fput+0x2b/0x190 [ 3067.308635] ksys_ioctl+0x9b/0xc0 [ 3067.312080] __x64_sys_ioctl+0x6f/0xb0 [ 3067.315953] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3067.320733] do_syscall_64+0xf9/0x620 [ 3067.324522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3067.329693] RIP: 0033:0x4665f9 [ 3067.332868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3067.351767] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3067.359470] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3067.366785] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3067.374105] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 06:34:36 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:36 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x801c0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r1) [ 3067.381371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3067.388816] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:36 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:36 executing program 5 (fault-call:1 fault-nth:36): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:36 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x200, @mcast1, 0x0, 0x2}, 0x20) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000100041400ffccdf250810010002000000000800010002000000b5008d98010000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x48d0}, 0x20008000) 06:34:36 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:36 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:36 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:36 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0xfffffffffffffffe, r2, {{0xde8, 0x56, 0x7, 0x7fffffff, 0x7fffffff, 0x4, 0x1, 0x3fcaa4bd}}}, 0x60) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3067.612366] FAULT_INJECTION: forcing a failure. [ 3067.612366] name failslab, interval 1, probability 0, space 0, times 0 [ 3067.652904] CPU: 1 PID: 23948 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3067.660823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3067.670224] Call Trace: [ 3067.672930] dump_stack+0x1fc/0x2ef [ 3067.676747] should_fail.cold+0xa/0xf [ 3067.680550] ? setup_fault_attr+0x200/0x200 [ 3067.684880] ? should_fail+0x142/0x7b0 [ 3067.688774] __should_failslab+0x115/0x180 [ 3067.693030] should_failslab+0x5/0x10 [ 3067.696835] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3067.702000] __kmalloc_node+0x38/0x70 [ 3067.705801] sbitmap_init_node+0x123/0x440 [ 3067.710036] blk_mq_realloc_hw_ctxs+0x5db/0x1000 [ 3067.714798] blk_mq_init_allocated_queue+0x20c/0x1300 [ 3067.719990] ? blkcg_init_queue+0x1fd/0x540 [ 3067.724317] blk_mq_init_queue+0x5c/0xa0 [ 3067.728378] loop_add+0x2cb/0x8a0 [ 3067.731820] loop_control_ioctl+0x16c/0x480 [ 3067.736129] ? loop_lookup+0x1d0/0x1d0 [ 3067.740016] ? ksys_write+0x241/0x2a0 [ 3067.743951] ? loop_lookup+0x1d0/0x1d0 [ 3067.747839] do_vfs_ioctl+0xcdb/0x12e0 [ 3067.751725] ? lock_downgrade+0x720/0x720 [ 3067.755918] ? check_preemption_disabled+0x41/0x280 [ 3067.760928] ? ioctl_preallocate+0x200/0x200 [ 3067.765329] ? __fget+0x356/0x510 [ 3067.768772] ? do_dup2+0x450/0x450 [ 3067.772303] ? vfs_write+0x393/0x540 [ 3067.776020] ? fput+0x2b/0x190 [ 3067.779226] ksys_ioctl+0x9b/0xc0 [ 3067.782679] __x64_sys_ioctl+0x6f/0xb0 [ 3067.786569] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3067.791170] do_syscall_64+0xf9/0x620 [ 3067.794977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3067.800173] RIP: 0033:0x4665f9 [ 3067.803369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3067.822263] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3067.829969] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3067.837240] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3067.844511] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 06:34:36 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x86240) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r3}, 0x78) write$FUSE_WRITE(r1, &(0x7f0000000200)={0x18, 0xfffffffffffffffe, r3, {0x9}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd7000fedb09000400000006001b004e23000006000300031e000014002000fc000000000000000000000000000000050021000000000006001d00a9030000"], 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x20000400) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000100}, 0x20000000) r5 = socket(0xa, 0x3, 0x3) bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3067.851879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3067.859151] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:36 executing program 5 (fault-call:1 fault-nth:37): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:36 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:36 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r2}, 0x78) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1) 06:34:36 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3068.029638] FAULT_INJECTION: forcing a failure. [ 3068.029638] name failslab, interval 1, probability 0, space 0, times 0 [ 3068.057800] CPU: 0 PID: 23977 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3068.065719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3068.075170] Call Trace: 06:34:36 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) 06:34:36 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) [ 3068.077775] dump_stack+0x1fc/0x2ef [ 3068.081421] should_fail.cold+0xa/0xf [ 3068.085231] ? should_fail+0x142/0x7b0 [ 3068.089130] ? setup_fault_attr+0x200/0x200 [ 3068.093483] __should_failslab+0x115/0x180 [ 3068.097737] should_failslab+0x5/0x10 [ 3068.101552] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3068.106845] blk_alloc_flush_queue+0x76/0x300 [ 3068.111353] blk_mq_realloc_hw_ctxs+0x7bc/0x1000 [ 3068.116155] blk_mq_init_allocated_queue+0x20c/0x1300 [ 3068.121531] ? blkcg_init_queue+0x1fd/0x540 [ 3068.125874] blk_mq_init_queue+0x5c/0xa0 06:34:36 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) [ 3068.129955] loop_add+0x2cb/0x8a0 [ 3068.133424] loop_control_ioctl+0x16c/0x480 [ 3068.137771] ? loop_lookup+0x1d0/0x1d0 [ 3068.141674] ? ksys_write+0x241/0x2a0 [ 3068.145485] ? loop_lookup+0x1d0/0x1d0 [ 3068.149382] do_vfs_ioctl+0xcdb/0x12e0 [ 3068.153368] ? lock_downgrade+0x720/0x720 [ 3068.157524] ? check_preemption_disabled+0x41/0x280 [ 3068.162551] ? ioctl_preallocate+0x200/0x200 [ 3068.166962] ? __fget+0x356/0x510 [ 3068.170473] ? do_dup2+0x450/0x450 [ 3068.174013] ? vfs_write+0x393/0x540 [ 3068.177888] ? fput+0x2b/0x190 [ 3068.181084] ksys_ioctl+0x9b/0xc0 [ 3068.184535] __x64_sys_ioctl+0x6f/0xb0 [ 3068.188429] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3068.193019] do_syscall_64+0xf9/0x620 [ 3068.196817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3068.202001] RIP: 0033:0x4665f9 [ 3068.205189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:34:37 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 06:34:37 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3068.224262] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3068.231963] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3068.239236] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3068.246509] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3068.253787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3068.261054] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:37 executing program 4: socket(0xa, 0x3, 0x3) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x20) 06:34:37 executing program 5 (fault-call:1 fault-nth:38): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:37 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioprio_get$uid(0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r1, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r2, {0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}, 0x78) write$FUSE_IOCTL(r1, &(0x7f00000020c0)={0x20, 0x0, 0x0, {0x2, 0x4, 0x2, 0x400}}, 0x20) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002100)=ANY=[@ANYBLOB="78060000daffffff", @ANYRES64=r4, @ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000100008000000100010000000000000009000000000000000100000000000000ffffff7f0000000006000000000000000100000000000000e2c2000000010000250000000080010020000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="ff0700008a3c00000000000005000000005602000000000000ffffff00000000ff7f0000ed00000000000000030000000000000063e0000000000000080000000000000004000000fffeffff00000000000000000300000000000000010000000000000009000000000000000900000000000000828b00000000000000000080080000000500000000400000000000000d9b6286b79706471e5f6b", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000000700000000000000060000000000000005000000000000000a000000eb0000002f6465762f6375736500000000000000040000000000000003000000000000000200000000000000070000000000000004000000db33ffff05000000000000001f0000000000000008000000000000000000000000000000080000000000000009000000000000000001000003000000ff0300000040000004000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="8000000000040000000000000400000000000000060000000000000007000000070000005c2f213f2c2d5200060000000000000001000000000000005e03000000000000090000000000000008000000940000000400000000000000550000000000000005000000000000000100000000000000008000000000000004000000000000000800000001000080010400000080000007000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="040000001800000000000000000000000000000004000000000000000b000000b80a00007b24213a2f2726ce2b2121000000000004000000000000000000000000000000e9090000000000000500000000000000ff0700000738000001000000000000000300000000000000008000000000000005000000000000001f00000000000000ff00000000000000ef210000ff7f0000ff7f000000c0000001000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="ffff000001040000000000000200000000000000cbe80000000000000a000000000100002f6465762f637573650000000000000002000000000000000000000000000000070000000000000001000000000000005c030000010000000000000000000000ff01000000000000c96f0000000000000500000000000000070000000000000000000000000000000104000000000000010001000030000007000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0600000006000000000000000000000000000000000400000000000010000000be0000002f6465762f696e7075742f6d696365000400000000000000030000000000000006000000000000000100000000000000080000000500000004000000000000000000000000000000994f0000000000003f000000000000000100000000000000530100000000000000000000001000000100ffff0040000003000000", @ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="06000000ffffffff00000000030000000000000006000000000000000400000080ffffff2628292f000000000400000000000000020000000000000093668d1800000000e72a00000000000002000000000000020000000000000000d200000000000000030000000000000002000000000000000600000000000000f7ffffffffffffff060000000400000004000000006000007c0f0000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="00000000e1040000000000000300000000000000ef0000000000000010000000010000002f6465762f696e7075742f6d69636500050000000000000003000000000000007f000000000000004200000000000000ff7f000001040000040000000000000000020000000000000500000000000000750000000000000000000000000000007e0000000000000006000000ff0300000600000000c0000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b002000004000000000000000600000000000000ff0700000000000010000000030000002f6465762f696e7075742f6d69636500040000000000000002000000000000000100000000000000020000000000000006000000f9ffffff02000000000000000000000000000000ffffff7f0000000005000000000000000000000001000000ff000000000000003b08000001000000000001000000000001040000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="241d00000400000000000000020000000000000001000000000000000100000000010000a100000000000000"], 0x678) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000000)={0x78, 0xfffffffffffffffc, r2, {0x80000001, 0x6, 0x0, {0x2, 0x80000000, 0xcac, 0xac, 0x6, 0x1c0, 0x10001, 0xfffffff9, 0x9, 0x6000, 0x10001, 0xee01, r6, 0x10001, 0x487}}}, 0x78) 06:34:37 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:37 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:37 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x1403, 0x300, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) [ 3068.433479] FAULT_INJECTION: forcing a failure. [ 3068.433479] name failslab, interval 1, probability 0, space 0, times 0 [ 3068.476067] CPU: 0 PID: 24015 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3068.483987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3068.493477] Call Trace: [ 3068.496061] dump_stack+0x1fc/0x2ef [ 3068.499699] should_fail.cold+0xa/0xf [ 3068.503512] ? setup_fault_attr+0x200/0x200 [ 3068.507831] ? mutex_trylock+0x1a0/0x1a0 [ 3068.511904] __should_failslab+0x115/0x180 [ 3068.516275] should_failslab+0x5/0x10 [ 3068.520082] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3068.525197] __kmalloc_node+0x38/0x70 [ 3068.529000] blk_mq_realloc_hw_ctxs+0x1d8/0x1000 [ 3068.533816] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 3068.539088] blk_mq_init_allocated_queue+0x20c/0x1300 [ 3068.544290] ? blkcg_init_queue+0x1fd/0x540 [ 3068.548664] blk_mq_init_queue+0x5c/0xa0 [ 3068.552726] loop_add+0x2cb/0x8a0 [ 3068.556174] loop_control_ioctl+0x16c/0x480 [ 3068.560496] ? loop_lookup+0x1d0/0x1d0 [ 3068.564452] ? ksys_write+0x241/0x2a0 [ 3068.568301] ? loop_lookup+0x1d0/0x1d0 [ 3068.572185] do_vfs_ioctl+0xcdb/0x12e0 [ 3068.576317] ? lock_downgrade+0x720/0x720 [ 3068.580481] ? check_preemption_disabled+0x41/0x280 [ 3068.585683] ? ioctl_preallocate+0x200/0x200 [ 3068.590095] ? __fget+0x356/0x510 [ 3068.593552] ? do_dup2+0x450/0x450 [ 3068.597079] ? vfs_write+0x393/0x540 [ 3068.600788] ? fput+0x2b/0x190 [ 3068.604002] ksys_ioctl+0x9b/0xc0 [ 3068.607470] __x64_sys_ioctl+0x6f/0xb0 [ 3068.611364] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3068.615968] do_syscall_64+0xf9/0x620 [ 3068.619775] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3068.625049] RIP: 0033:0x4665f9 [ 3068.628295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3068.647226] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3068.655471] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3068.662755] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 06:34:37 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1410, 0x20, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0400e200020000020000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000a001000000000000600303000011474c3bf448e15b"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x20000011) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3068.670138] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3068.677424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3068.684703] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:37 executing program 5 (fault-call:1 fault-nth:39): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:37 executing program 2: r0 = socket(0x1, 0x5, 0x3a21ce2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000580)={0x7, &(0x7f0000000140)=[{}, {@none}, {}, {@none}, {}, {@fixed}, {@fixed}]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) write$FUSE_LSEEK(r3, &(0x7f00000005c0)={0x18, 0x0, r2, {0x1ff}}, 0x18) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x240000c0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) [ 3068.821306] FAULT_INJECTION: forcing a failure. [ 3068.821306] name failslab, interval 1, probability 0, space 0, times 0 [ 3068.836811] CPU: 0 PID: 24045 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3068.844859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3068.854224] Call Trace: [ 3068.856832] dump_stack+0x1fc/0x2ef [ 3068.860565] should_fail.cold+0xa/0xf [ 3068.864390] ? setup_fault_attr+0x200/0x200 06:34:37 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:37 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3068.868730] ? lock_acquire+0x170/0x3c0 [ 3068.872885] __should_failslab+0x115/0x180 [ 3068.877130] should_failslab+0x5/0x10 [ 3068.880944] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3068.886065] blk_mq_init_tags+0x6a/0x2b0 [ 3068.890140] blk_mq_alloc_rq_map+0x9d/0x230 [ 3068.894473] ? elevator_get+0x29/0x170 [ 3068.898375] blk_mq_init_sched+0x219/0x730 [ 3068.902627] elevator_init_mq+0xf0/0x180 [ 3068.906754] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 3068.911969] blk_mq_init_queue+0x5c/0xa0 [ 3068.916121] loop_add+0x2cb/0x8a0 [ 3068.919587] loop_control_ioctl+0x16c/0x480 [ 3068.923915] ? loop_lookup+0x1d0/0x1d0 [ 3068.927814] ? ksys_write+0x241/0x2a0 [ 3068.931614] ? loop_lookup+0x1d0/0x1d0 [ 3068.935494] do_vfs_ioctl+0xcdb/0x12e0 [ 3068.939518] ? lock_downgrade+0x720/0x720 [ 3068.943674] ? check_preemption_disabled+0x41/0x280 [ 3068.948689] ? ioctl_preallocate+0x200/0x200 [ 3068.953101] ? __fget+0x356/0x510 [ 3068.956611] ? do_dup2+0x450/0x450 [ 3068.960154] ? vfs_write+0x393/0x540 [ 3068.963879] ? fput+0x2b/0x190 [ 3068.967076] ksys_ioctl+0x9b/0xc0 [ 3068.970522] __x64_sys_ioctl+0x6f/0xb0 [ 3068.974397] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3068.978969] do_syscall_64+0xf9/0x620 [ 3068.982771] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3068.987999] RIP: 0033:0x4665f9 [ 3068.991202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3069.010142] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:34:37 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x1404, 0x104, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000090}, 0x40010) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x18fe00, 0x0) getpeername(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000001c0)=0x80) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400e00}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1404, 0x20, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x41) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x1409, 0x4, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xfffffffd}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x1}]}, 0x40}}, 0x4080) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 06:34:37 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2e77, 0x3}, 0x20) [ 3069.017967] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3069.025252] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3069.032622] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3069.039904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3069.047182] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:37 executing program 5 (fault-call:1 fault-nth:40): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:37 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:38 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:38 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000041400012dbd700800010001000d000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r3, 0x0, 0x40040d1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30008000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRESDEC=r5], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x4044040) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x1) 06:34:38 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:38 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2) [ 3069.229778] FAULT_INJECTION: forcing a failure. [ 3069.229778] name failslab, interval 1, probability 0, space 0, times 0 06:34:38 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000180)={0x401, 0x39555659, 0x2, @discrete={0x9, 0x5}}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6279a813681572bc27bd7000ffdbdf2508004f000000000008004f0009000000"], 0x20}}, 0x20000000) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x1406, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) [ 3069.275668] CPU: 0 PID: 24076 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3069.283589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3069.292950] Call Trace: [ 3069.295555] dump_stack+0x1fc/0x2ef [ 3069.299299] should_fail.cold+0xa/0xf [ 3069.303111] ? setup_fault_attr+0x200/0x200 [ 3069.307440] ? should_fail+0x142/0x7b0 [ 3069.311426] __should_failslab+0x115/0x180 [ 3069.315700] should_failslab+0x5/0x10 [ 3069.319950] kmem_cache_alloc_node_trace+0x244/0x3b0 06:34:38 executing program 4: r0 = socket(0xa, 0x0, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r1, &(0x7f0000001340)={&(0x7f0000000080)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/236, 0xec}, {&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f0000000280)=""/169, 0xa9}, {&(0x7f0000000340)=""/4096, 0x1000}], 0xc}, 0x2040) r2 = socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000001400)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000001440)={r3, r4/1000+60000}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000013c0)={'vcan0\x00'}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) write$6lowpan_enable(r5, &(0x7f0000001380)='1', 0x1) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3069.325072] __kmalloc_node+0x38/0x70 [ 3069.328880] sbitmap_init_node+0x123/0x440 [ 3069.333130] blk_mq_realloc_hw_ctxs+0x5db/0x1000 [ 3069.337906] blk_mq_init_allocated_queue+0x20c/0x1300 [ 3069.343108] ? blkcg_init_queue+0x1fd/0x540 [ 3069.347447] blk_mq_init_queue+0x5c/0xa0 [ 3069.351525] loop_add+0x2cb/0x8a0 [ 3069.354993] loop_control_ioctl+0x16c/0x480 [ 3069.359321] ? loop_lookup+0x1d0/0x1d0 [ 3069.363220] ? ksys_write+0x241/0x2a0 [ 3069.367037] ? loop_lookup+0x1d0/0x1d0 [ 3069.371022] do_vfs_ioctl+0xcdb/0x12e0 [ 3069.374924] ? lock_downgrade+0x720/0x720 [ 3069.379120] ? check_preemption_disabled+0x41/0x280 [ 3069.384144] ? ioctl_preallocate+0x200/0x200 [ 3069.388562] ? __fget+0x356/0x510 [ 3069.392114] ? do_dup2+0x450/0x450 [ 3069.395658] ? vfs_write+0x393/0x540 [ 3069.399380] ? fput+0x2b/0x190 [ 3069.402583] ksys_ioctl+0x9b/0xc0 [ 3069.406046] __x64_sys_ioctl+0x6f/0xb0 [ 3069.409946] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3069.414537] do_syscall_64+0xf9/0x620 [ 3069.418347] entry_SYSCALL_64_after_hwframe+0x49/0xbe 06:34:38 executing program 4: r0 = socket(0xa, 0x3, 0x3) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="009d8854f700fcdbdf250400000000020200bad3da2900000000000000000000f5895ab8c66ca9c21416cbf23b997fcf0d653e35b13f80d952"], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x80) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) [ 3069.423536] RIP: 0033:0x4665f9 [ 3069.426728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3069.445732] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3069.453710] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3069.460992] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3069.468377] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 06:34:38 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x140b, 0x20, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xff}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c804}, 0x894) [ 3069.475653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3069.482933] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:38 executing program 5 (fault-call:1 fault-nth:41): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:38 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:38 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:38 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3069.603381] FAULT_INJECTION: forcing a failure. [ 3069.603381] name failslab, interval 1, probability 0, space 0, times 0 [ 3069.670928] CPU: 1 PID: 24119 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3069.678850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3069.688211] Call Trace: [ 3069.690811] dump_stack+0x1fc/0x2ef [ 3069.694454] should_fail.cold+0xa/0xf [ 3069.698265] ? should_fail+0x142/0x7b0 [ 3069.702166] ? setup_fault_attr+0x200/0x200 [ 3069.706504] __should_failslab+0x115/0x180 [ 3069.710745] should_failslab+0x5/0x10 [ 3069.714558] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3069.719778] blk_alloc_flush_queue+0x76/0x300 [ 3069.724289] blk_mq_realloc_hw_ctxs+0x7bc/0x1000 [ 3069.729046] blk_mq_init_allocated_queue+0x20c/0x1300 [ 3069.734337] ? blkcg_init_queue+0x1fd/0x540 [ 3069.738651] blk_mq_init_queue+0x5c/0xa0 [ 3069.742716] loop_add+0x2cb/0x8a0 [ 3069.746197] loop_control_ioctl+0x16c/0x480 [ 3069.750517] ? loop_lookup+0x1d0/0x1d0 [ 3069.754399] ? ksys_write+0x241/0x2a0 [ 3069.758186] ? loop_lookup+0x1d0/0x1d0 [ 3069.762063] do_vfs_ioctl+0xcdb/0x12e0 [ 3069.765950] ? lock_downgrade+0x720/0x720 [ 3069.770108] ? check_preemption_disabled+0x41/0x280 [ 3069.775126] ? ioctl_preallocate+0x200/0x200 [ 3069.779661] ? __fget+0x356/0x510 [ 3069.783141] ? do_dup2+0x450/0x450 [ 3069.786683] ? vfs_write+0x393/0x540 [ 3069.790398] ? fput+0x2b/0x190 [ 3069.793618] ksys_ioctl+0x9b/0xc0 [ 3069.797079] __x64_sys_ioctl+0x6f/0xb0 [ 3069.800972] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3069.805547] do_syscall_64+0xf9/0x620 [ 3069.809348] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3069.814535] RIP: 0033:0x4665f9 [ 3069.817755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3069.836677] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3069.844388] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3069.851664] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3069.858931] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 06:34:38 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x84, &(0x7f0000000080)=""/132, 0x41100, 0xb, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x7, 0x0, 0x858}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:38 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x50540, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:38 executing program 4: r0 = socket(0x7ca20f621481f795, 0x3, 0x5) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000031400082cbd7000fe84a9717f779dd9fadbdf250900020073797a3100000000080041007278650014003300766972745f7769666930000000000000a63df3fd79a955"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x48000) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3069.866187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3069.873449] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:38 executing program 5 (fault-call:1 fault-nth:42): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:38 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) 06:34:38 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x49c801) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x119141) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x1ff, 0x0, 0x4, 0x1, 0x8, {0x77359400}, {0x2, 0x2, 0x8, 0x3f, 0x7, 0x6, "d31b3f14"}, 0x4, 0x3, @fd=r3, 0x5, 0x0, r1}) write$FUSE_OPEN(r2, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 06:34:38 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:38 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x991340, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x20c240) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000380)={0x3ff, 0x0, 0x4, 0x100, 0x7fffffff, {r3, r4/1000+10000}, {0x1, 0x8, 0x1f, 0x3f, 0x2, 0x8, "686c88b2"}, 0x80000001, 0x4, @offset=0xaa16, 0xc000, 0x0, r1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000004c0)={0x7ff, 0x3, 0x4, 0x7002, 0x5, {0x77359400}, {0x4, 0x8, 0x5, 0x0, 0x80, 0xfb, "359cf5ac"}, 0x6, 0x2, @userptr=0x7f, 0x1, 0x0, r5}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="08002cd63b2ecff782915e8fe37af5c7f7b4df49000000dbdf2503020000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x804) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x200}, 0x20) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r6, 0x500, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ipvlan0\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7b5a}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004050) 06:34:38 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1f00c0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 3070.064516] FAULT_INJECTION: forcing a failure. [ 3070.064516] name failslab, interval 1, probability 0, space 0, times 0 [ 3070.095308] CPU: 0 PID: 24155 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3070.103226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:34:38 executing program 4: socket(0xa, 0x3, 0x3) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x0, 0xfffffffc}, 0x20) [ 3070.112585] Call Trace: [ 3070.115169] dump_stack+0x1fc/0x2ef [ 3070.118785] should_fail.cold+0xa/0xf [ 3070.122587] ? setup_fault_attr+0x200/0x200 [ 3070.126917] ? should_fail+0x142/0x7b0 [ 3070.130822] __should_failslab+0x115/0x180 [ 3070.135070] should_failslab+0x5/0x10 [ 3070.138875] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3070.143986] __kmalloc_node+0x38/0x70 [ 3070.147794] blk_alloc_flush_queue+0x120/0x300 [ 3070.152400] blk_mq_realloc_hw_ctxs+0x7bc/0x1000 [ 3070.157199] blk_mq_init_allocated_queue+0x20c/0x1300 06:34:39 executing program 4: r0 = socket(0xa, 0x1, 0xffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', r2, 0x4, 0xbf, 0x20, 0x4, 0x14, @empty, @loopback, 0x8000, 0xff00, 0xff, 0x5}}) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x81a, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) socket(0x2b, 0x1, 0x1) [ 3070.162417] ? blkcg_init_queue+0x1fd/0x540 [ 3070.166762] blk_mq_init_queue+0x5c/0xa0 [ 3070.170837] loop_add+0x2cb/0x8a0 [ 3070.174308] loop_control_ioctl+0x16c/0x480 [ 3070.178639] ? loop_lookup+0x1d0/0x1d0 [ 3070.182538] ? ksys_write+0x241/0x2a0 [ 3070.186347] ? loop_lookup+0x1d0/0x1d0 [ 3070.190251] do_vfs_ioctl+0xcdb/0x12e0 [ 3070.194161] ? lock_downgrade+0x720/0x720 [ 3070.198314] ? check_preemption_disabled+0x41/0x280 [ 3070.203338] ? ioctl_preallocate+0x200/0x200 [ 3070.207763] ? __fget+0x356/0x510 [ 3070.211226] ? do_dup2+0x450/0x450 06:34:39 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x2200) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001214040028bd7000fbdbc0254d001500000056a6dd5eaadf4d7b862867337b080015000400009732000000eaee9b22bedb"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4024884) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x22100, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000340)={{0xd6, 0x9}, 0x0, 0x7ff, 0x5, {0x5, 0x80}, 0x3, 0x2}) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, &(0x7f0000000440)=0x80) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x141001) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x50, 0x1402, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x50}}, 0x8000) [ 3070.214772] ? vfs_write+0x393/0x540 [ 3070.218691] ? fput+0x2b/0x190 [ 3070.222103] ksys_ioctl+0x9b/0xc0 [ 3070.225581] __x64_sys_ioctl+0x6f/0xb0 [ 3070.229477] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3070.234093] do_syscall_64+0xf9/0x620 [ 3070.237912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3070.243193] RIP: 0033:0x4665f9 [ 3070.246389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3070.265298] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3070.273018] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3070.280294] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3070.287563] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3070.294819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3070.302082] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:39 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r1, {0x8000}}, 0x18) r2 = socket(0xa, 0x3, 0x3) bind$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:39 executing program 5 (fault-call:1 fault-nth:43): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:39 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:39 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x3cbe}}, 0x18) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf250000000008000c000000000006001d0001000000050907000300000006001b004e215ca7444629d82051f3f1562ab535630000140063616e31000000000000000000000600020000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x80) 06:34:39 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:39 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@can, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/156, 0x9c}, {&(0x7f0000000180)=""/153, 0x99}, {&(0x7f0000000240)=""/160, 0xa0}, {&(0x7f0000000300)=""/16, 0x10}], 0x4, &(0x7f0000000380)=""/8, 0x8}, 0x10000) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:39 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f00000000c0)={0xa0, 0x0, 0x0, {{0x2, 0x1, 0xffffffffffffffff, 0x7, 0xc0000, 0x3, {0x6, 0x7, 0xb5, 0x1, 0x1, 0xfffffffffffff4d5, 0x8001, 0x1, 0x7fffffff, 0x0, 0x40, 0xee01, 0xffffffffffffffff, 0x3, 0x1}}, {0x0, 0x11}}}, 0xa0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x2}}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r1, &(0x7f0000002200)={0x18, 0x0, r2, {0xd59}}, 0x18) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x2a8140, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002380), 0x500, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f00000023c0)=0x3) read$FUSE(r5, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r5, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r7}, 0x78) write$FUSE_STATFS(r0, &(0x7f0000002300)={0x60, 0x0, r7, {{0x1f, 0xec, 0x8, 0xb1, 0x3, 0xffffffe1, 0x8, 0xe1}}}, 0x60) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x1) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r8, &(0x7f0000008340)={0x678, 0xffffffffffffffda, r9, [{{0x6, 0x0, 0x0, 0x0, 0x80000001, 0x10000, {0x1, 0x9, 0x1, 0x7fffffff, 0x6, 0x1, 0xc2e2, 0x100, 0x25, 0x18000, 0x20, r10, r11, 0x7ff, 0x3c8a}}, {0x5, 0xfffffffffffffff8, 0x0, 0x7fff}}, {{0x5, 0x3, 0xe063, 0x8, 0x4, 0xfffffeff, {0x0, 0x3, 0x1, 0x9, 0x9, 0x8b82, 0x80000000, 0x8, 0x5, 0x4000, 0x0, r10, r11, 0x0, 0x7}}, {0x6, 0x5, 0xa, 0xeb, '/dev/cuse\x00'}}, {{0x4, 0x3, 0x2, 0x7, 0x4, 0xffff33db, {0x5, 0x1f, 0x8, 0x0, 0x8, 0x9, 0x100, 0x3, 0x3ff, 0x4000, 0x4, 0x0, r11, 0x80, 0x400}}, {0x4, 0x6, 0x7, 0x7, '\\/!?,-R'}}, {{0x6, 0x1, 0x35e, 0x9, 0x8, 0x94, {0x4, 0x55, 0x5, 0x1, 0x8000, 0x4, 0x8, 0x80000001, 0x401, 0x8000, 0x7, r10, r11, 0x4, 0x18}}, {0x0, 0x4, 0xb, 0xab8, '{$!:/\'&\xce+!!'}}, {{0x4, 0x0, 0x9e9, 0x5, 0x7ff, 0x3807, {0x1, 0x3, 0x8000, 0x5, 0x1f, 0xff, 0x21ef, 0x7fff, 0x7fff, 0xc000, 0x1, 0x0, r11, 0xffff, 0x401}}, {0x2, 0xe8cb, 0xa, 0x100, '/dev/cuse\x00'}}, {{0x2, 0x0, 0x7, 0x1, 0x35c, 0x1, {0x0, 0x1ff, 0x6fc9, 0x5, 0x7, 0x0, 0x401, 0x0, 0x10001, 0x3000, 0x7, r10, r11, 0x6, 0x6}}, {0x0, 0x400, 0x10, 0xbe, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0x6, 0x1, 0x8, 0x5, {0x4, 0x0, 0x4fd9, 0x3f, 0x1, 0x153, 0x0, 0x1000, 0xffff0001, 0x4000, 0x3, r12, r11, 0x6, 0xffffffff}}, {0x3, 0x6, 0x4, 0xffffff80, '&()/'}}, {{0x4, 0x2, 0x188d6693, 0x2ae7, 0x2, 0x2000000, {0x0, 0xd2, 0x3, 0x2, 0x6, 0xfffffffffffffff7, 0x6, 0x4, 0x4, 0x6000, 0xf7c, r10, r11, 0x0, 0x4e1}}, {0x3, 0xef, 0x10, 0x1, '/dev/input/mice\x00'}}, {{0x5, 0x3, 0x7f, 0x42, 0x7fff, 0x401, {0x4, 0x200, 0x4, 0x75, 0x0, 0x7e, 0x6, 0x3ff, 0x6, 0xc000, 0x3, 0x0, 0x0, 0x2b0, 0x4}}, {0x6, 0x7ff, 0x10, 0x3, '/dev/input/mice\x00'}}, {{0x4, 0x2, 0x1, 0x2, 0x6, 0xfffffff9, {0x2, 0x0, 0x7fffffff, 0x5, 0x100000000, 0xff, 0x83b, 0x1, 0x10000, 0x0, 0x401, r10, r11, 0x1d24, 0x4}}, {0x2, 0x1, 0x1, 0x100, '\xa1'}}]}, 0x678) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002240)={0xa0, 0x0, r2, {{0x4, 0x2, 0x5, 0x19a, 0x0, 0x200, {0x5, 0x7, 0x2, 0xca, 0x2, 0x6, 0x400, 0xe3, 0x39346292, 0x6000, 0x0, r12, r3, 0x401, 0x135}}, {0x0, 0x1a}}}, 0xa0) [ 3070.555788] FAULT_INJECTION: forcing a failure. [ 3070.555788] name failslab, interval 1, probability 0, space 0, times 0 [ 3070.569954] CPU: 0 PID: 24204 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3070.577865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3070.587217] Call Trace: [ 3070.589821] dump_stack+0x1fc/0x2ef [ 3070.593452] should_fail.cold+0xa/0xf [ 3070.597332] ? setup_fault_attr+0x200/0x200 [ 3070.601663] ? lock_acquire+0x170/0x3c0 06:34:39 executing program 2: socket(0x29, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) [ 3070.605637] __should_failslab+0x115/0x180 [ 3070.609869] should_failslab+0x5/0x10 [ 3070.613683] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3070.618801] blk_mq_init_tags+0x6a/0x2b0 [ 3070.622874] blk_mq_alloc_rq_map+0x9d/0x230 [ 3070.627206] ? elevator_get+0x29/0x170 [ 3070.631101] blk_mq_init_sched+0x219/0x730 [ 3070.635428] elevator_init_mq+0xf0/0x180 [ 3070.639508] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 3070.644702] blk_mq_init_queue+0x5c/0xa0 [ 3070.648754] loop_add+0x2cb/0x8a0 [ 3070.652212] loop_control_ioctl+0x16c/0x480 [ 3070.656534] ? loop_lookup+0x1d0/0x1d0 [ 3070.660428] ? ksys_write+0x241/0x2a0 [ 3070.664226] ? loop_lookup+0x1d0/0x1d0 [ 3070.668103] do_vfs_ioctl+0xcdb/0x12e0 [ 3070.671998] ? lock_downgrade+0x720/0x720 [ 3070.676147] ? check_preemption_disabled+0x41/0x280 [ 3070.681194] ? ioctl_preallocate+0x200/0x200 [ 3070.685703] ? __fget+0x356/0x510 [ 3070.689163] ? do_dup2+0x450/0x450 [ 3070.692708] ? vfs_write+0x393/0x540 [ 3070.696429] ? fput+0x2b/0x190 [ 3070.699632] ksys_ioctl+0x9b/0xc0 [ 3070.703096] __x64_sys_ioctl+0x6f/0xb0 [ 3070.706976] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3070.711554] do_syscall_64+0xf9/0x620 [ 3070.715357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3070.720540] RIP: 0033:0x4665f9 [ 3070.723725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3070.742624] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:34:39 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x129e25c4ebb13c77, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) [ 3070.750947] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3070.758214] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3070.765475] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3070.772740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3070.780015] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:39 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x60400, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:39 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:39 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:39 executing program 5 (fault-call:1 fault-nth:44): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:39 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:39 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58030000f68a3e37787b4f4a3fae041400022cf70a00fcdbdf2508000100000000000000080001bd60000000080001000500000008000100008000000800010001000000080001000200000008000100b7000000080001001f0000003fe63302f6b1474ae591820a34c884b943837728cfd9b0d8867a9b7bed9696d804b9ac16f451cbfaef49cf97ac2f3b2f6d53bcc5a1877e4191779404fb8b7f5a561b6f1da5b686f089e697406ca6f28b6e466b8393f76e51be56d1c26ee209d500c1d745ce36cb297c472bf02461653e87929a9ef7f3e4c7c64d35d6b2455dfae418062b99"], 0x58}, 0x1, 0x0, 0x0, 0x8045}, 0x20044080) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x20, 0x1405, 0x100, 0x70bd29, 0x25dfdbfb, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x4004000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x1) 06:34:39 executing program 2: ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:39 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3071.015967] FAULT_INJECTION: forcing a failure. [ 3071.015967] name failslab, interval 1, probability 0, space 0, times 0 [ 3071.030538] CPU: 0 PID: 24242 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3071.038451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3071.047897] Call Trace: [ 3071.050500] dump_stack+0x1fc/0x2ef [ 3071.054147] should_fail.cold+0xa/0xf [ 3071.057962] ? setup_fault_attr+0x200/0x200 [ 3071.062302] ? lock_acquire+0x170/0x3c0 [ 3071.066298] __should_failslab+0x115/0x180 [ 3071.070541] should_failslab+0x5/0x10 [ 3071.074347] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3071.079462] __kmalloc_node+0x38/0x70 [ 3071.083271] sbitmap_init_node+0x123/0x440 [ 3071.087513] sbitmap_queue_init_node+0x37/0x6c0 [ 3071.092181] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 3071.097215] blk_mq_init_tags+0x10d/0x2b0 [ 3071.101362] blk_mq_alloc_rq_map+0x9d/0x230 [ 3071.105669] ? elevator_get+0x29/0x170 [ 3071.109554] blk_mq_init_sched+0x219/0x730 [ 3071.113801] elevator_init_mq+0xf0/0x180 [ 3071.117866] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 3071.123047] blk_mq_init_queue+0x5c/0xa0 [ 3071.127098] loop_add+0x2cb/0x8a0 [ 3071.130553] loop_control_ioctl+0x16c/0x480 [ 3071.134870] ? loop_lookup+0x1d0/0x1d0 [ 3071.138746] ? ksys_write+0x241/0x2a0 [ 3071.142564] ? loop_lookup+0x1d0/0x1d0 [ 3071.146467] do_vfs_ioctl+0xcdb/0x12e0 [ 3071.150351] ? lock_downgrade+0x720/0x720 [ 3071.154504] ? check_preemption_disabled+0x41/0x280 [ 3071.159610] ? ioctl_preallocate+0x200/0x200 [ 3071.164025] ? __fget+0x356/0x510 [ 3071.167475] ? do_dup2+0x450/0x450 [ 3071.171116] ? vfs_write+0x393/0x540 [ 3071.174839] ? fput+0x2b/0x190 [ 3071.178025] ksys_ioctl+0x9b/0xc0 [ 3071.181480] __x64_sys_ioctl+0x6f/0xb0 [ 3071.185363] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3071.189947] do_syscall_64+0xf9/0x620 [ 3071.193753] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3071.198932] RIP: 0033:0x4665f9 [ 3071.202112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3071.221019] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3071.228718] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3071.235976] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3071.243248] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3071.250541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3071.258259] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:40 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000100)={0x3, 0x80000000, 0x1, 'queue1\x00', 0xfffff4d4}) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:40 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:40 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1409, 0x8, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24}, 0x40) 06:34:40 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:40 executing program 5 (fault-call:1 fault-nth:45): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:40 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x48400) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000040)) 06:34:40 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:40 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x81, 0x80000000, 0x0, {0x6, 0x3ff, 0x7fffffff, 0x4, 0x2, 0xffffffff, 0x1, 0x401, 0x7, 0xb000, 0xe6, 0xee00, 0x0, 0x101, 0x10001}}}, 0x78) [ 3071.452316] FAULT_INJECTION: forcing a failure. [ 3071.452316] name failslab, interval 1, probability 0, space 0, times 0 [ 3071.472504] CPU: 0 PID: 24261 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3071.480542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3071.489936] Call Trace: [ 3071.492536] dump_stack+0x1fc/0x2ef [ 3071.496183] should_fail.cold+0xa/0xf 06:34:40 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140c, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000100)={{0x6, 0x54}, {0x7, 0x1f}, 0x2, 0x0, 0x1}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 3071.500000] ? setup_fault_attr+0x200/0x200 [ 3071.504774] ? lock_acquire+0x170/0x3c0 [ 3071.508767] __should_failslab+0x115/0x180 [ 3071.513018] should_failslab+0x5/0x10 [ 3071.516828] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3071.521945] sbitmap_queue_init_node+0x240/0x6c0 [ 3071.526723] blk_mq_init_tags+0x10d/0x2b0 [ 3071.530955] blk_mq_alloc_rq_map+0x9d/0x230 [ 3071.535284] ? elevator_get+0x29/0x170 [ 3071.539177] blk_mq_init_sched+0x219/0x730 [ 3071.543449] elevator_init_mq+0xf0/0x180 [ 3071.547528] blk_mq_init_allocated_queue+0xe1f/0x1300 06:34:40 executing program 4: r0 = socket(0xa, 0x3, 0x3) socketpair(0x1f, 0x800, 0x3e000, &(0x7f0000000000)) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3071.552740] blk_mq_init_queue+0x5c/0xa0 [ 3071.556809] loop_add+0x2cb/0x8a0 [ 3071.560276] loop_control_ioctl+0x16c/0x480 [ 3071.564605] ? loop_lookup+0x1d0/0x1d0 [ 3071.568511] ? ksys_write+0x241/0x2a0 [ 3071.572324] ? loop_lookup+0x1d0/0x1d0 [ 3071.576222] do_vfs_ioctl+0xcdb/0x12e0 [ 3071.580243] ? lock_downgrade+0x720/0x720 [ 3071.584407] ? check_preemption_disabled+0x41/0x280 [ 3071.589438] ? ioctl_preallocate+0x200/0x200 [ 3071.593861] ? __fget+0x356/0x510 [ 3071.597356] ? do_dup2+0x450/0x450 06:34:40 executing program 4: r0 = socket(0xa, 0xa, 0x7f) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x4, @empty, 0xfffffffe}, 0x20) [ 3071.600910] ? vfs_write+0x393/0x540 [ 3071.604633] ? fput+0x2b/0x190 [ 3071.607839] ksys_ioctl+0x9b/0xc0 [ 3071.611307] __x64_sys_ioctl+0x6f/0xb0 [ 3071.615206] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3071.619801] do_syscall_64+0xf9/0x620 [ 3071.623620] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3071.628917] RIP: 0033:0x4665f9 [ 3071.632116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:34:40 executing program 4: socket(0xa, 0x3, 0x3) 06:34:40 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x7f4a}, 0x20) [ 3071.651301] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3071.659024] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3071.666298] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3071.673664] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3071.680945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3071.688227] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:40 executing program 5 (fault-call:1 fault-nth:46): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:40 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x20) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000121400032abd7000fbdbdf25080001000100000008001500acbd4c742d000000000800030003000000080015000000000008000100000000000800010001000000318360bc88b6e32a91810134abca89bece9e32f691c9804004e8b673e2c38cb86b7a79275b54bc2255d610749c4bb37a8450522d105a7b247785c41167aa607c2013ed124e"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x1410, 0x10, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40890}, 0x8000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x49402, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 06:34:40 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:40 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:40 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) 06:34:40 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000000)={0x400, 0x0, 'client0\x00', 0x0, "538f09250265c548", "8088f03e36ad09a8058bde7794cae88460895616e303cd15297b70369603e490", 0x8, 0x4}) [ 3071.873492] FAULT_INJECTION: forcing a failure. [ 3071.873492] name failslab, interval 1, probability 0, space 0, times 0 [ 3071.904835] CPU: 0 PID: 24316 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3071.912756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:34:40 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:40 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3071.922118] Call Trace: [ 3071.924716] dump_stack+0x1fc/0x2ef [ 3071.928358] should_fail.cold+0xa/0xf [ 3071.932182] ? setup_fault_attr+0x200/0x200 [ 3071.936513] ? lock_acquire+0x170/0x3c0 [ 3071.940510] __should_failslab+0x115/0x180 [ 3071.944757] should_failslab+0x5/0x10 [ 3071.948571] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3071.953693] __alloc_disk_node+0x69/0x410 [ 3071.957940] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3071.962533] loop_add+0x39c/0x8a0 [ 3071.966001] loop_control_ioctl+0x16c/0x480 06:34:40 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3071.970330] ? loop_lookup+0x1d0/0x1d0 [ 3071.974234] ? ksys_write+0x241/0x2a0 [ 3071.978039] ? loop_lookup+0x1d0/0x1d0 [ 3071.981931] do_vfs_ioctl+0xcdb/0x12e0 [ 3071.985828] ? lock_downgrade+0x720/0x720 [ 3071.989987] ? check_preemption_disabled+0x41/0x280 [ 3071.995012] ? ioctl_preallocate+0x200/0x200 [ 3071.999432] ? __fget+0x356/0x510 [ 3072.002899] ? do_dup2+0x450/0x450 [ 3072.006444] ? vfs_write+0x393/0x540 [ 3072.010167] ? fput+0x2b/0x190 [ 3072.013377] ksys_ioctl+0x9b/0xc0 [ 3072.016844] __x64_sys_ioctl+0x6f/0xb0 06:34:40 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x3, 0x5, 0x2ed, {0x0, 0xea60}, {r2, r3/1000+60000}, {0x4, 0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "a2997942d23f3ed4"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3072.020739] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3072.025329] do_syscall_64+0xf9/0x620 [ 3072.029143] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3072.034336] RIP: 0033:0x4665f9 [ 3072.037542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.056451] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3072.064178] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3072.071473] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3072.078734] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3072.085994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3072.093253] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:40 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x2}, 0x20) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x2}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r2, &(0x7f00000086c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000000200)={0x78, 0xffffffffffffffda, r3}, 0x78) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0x0, r3, {0xfffffff8}}, 0x18) 06:34:41 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:41 executing program 5 (fault-call:1 fault-nth:47): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:41 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:41 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:41 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 06:34:41 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf9, 0x1}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x29, 0x1, 0x7, 0x2b3, 0x11, @mcast1, @dev={0xfe, 0x80, '\x00', 0x40}, 0x8000, 0x80, 0x929, 0x1f}}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000dd9f62ff237ada9cffdbdf25080001000000000008000300000000000800010000000000080003081100000008000100000000000800030001702918a0ce70c24b09a6c216c4b656153d18853d0dc1de65af54788a0073c6f8ba3c4eabdc46d0c459c7e68877424fc886ad0f4d3d0e69b69ac617d974a1a9a4ea381af3153307f2bc0e53e7dc281b09adefb4deb34b41a18e07d40d76f3503890b3136b749da8ae2219282582da31ca6d19dd66e8b23cf0221781a8b97ffeb352f8809d232a519a81b6b7c366e07efe51597efcee621a2ffc86a38aa5d66f6553c53bf1a7faba85"], 0x40}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000080) [ 3072.292566] FAULT_INJECTION: forcing a failure. [ 3072.292566] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.307821] CPU: 1 PID: 24357 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3072.315734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3072.325098] Call Trace: [ 3072.327702] dump_stack+0x1fc/0x2ef [ 3072.331347] should_fail.cold+0xa/0xf [ 3072.335163] ? setup_fault_attr+0x200/0x200 06:34:41 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1406, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}}, 0x800c040) 06:34:41 executing program 4: r0 = socket(0xa, 0x3, 0x3) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) write$vhost_msg(r1, &(0x7f0000000240)={0x1, {&(0x7f0000000080)=""/195, 0xc3, &(0x7f0000000180)=""/153, 0x2, 0x1}}, 0x48) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) [ 3072.339499] ? lock_acquire+0x170/0x3c0 [ 3072.343483] __should_failslab+0x115/0x180 [ 3072.347814] should_failslab+0x5/0x10 [ 3072.351622] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3072.356740] __kmalloc_node+0x38/0x70 [ 3072.360590] disk_expand_part_tbl+0x1b4/0x3a0 [ 3072.365186] __alloc_disk_node+0x118/0x410 [ 3072.369433] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3072.374029] loop_add+0x39c/0x8a0 [ 3072.377500] loop_control_ioctl+0x16c/0x480 [ 3072.381835] ? loop_lookup+0x1d0/0x1d0 [ 3072.385733] ? ksys_write+0x241/0x2a0 [ 3072.389545] ? loop_lookup+0x1d0/0x1d0 [ 3072.393452] do_vfs_ioctl+0xcdb/0x12e0 [ 3072.397352] ? lock_downgrade+0x720/0x720 [ 3072.401514] ? check_preemption_disabled+0x41/0x280 [ 3072.406543] ? ioctl_preallocate+0x200/0x200 [ 3072.410951] ? __fget+0x356/0x510 [ 3072.414432] ? do_dup2+0x450/0x450 [ 3072.417983] ? vfs_write+0x393/0x540 [ 3072.421701] ? fput+0x2b/0x190 [ 3072.424897] ksys_ioctl+0x9b/0xc0 [ 3072.428355] __x64_sys_ioctl+0x6f/0xb0 [ 3072.432255] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3072.436844] do_syscall_64+0xf9/0x620 [ 3072.440739] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3072.445919] RIP: 0033:0x4665f9 [ 3072.449110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.468009] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3072.475710] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3072.482967] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3072.490226] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3072.497483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3072.504817] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:41 executing program 5 (fault-call:1 fault-nth:48): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:41 executing program 4: r0 = socket(0xa, 0x3, 0x3) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0xfffffffc}, 0x20) r1 = socket(0x1, 0x5, 0x10000) getpeername$l2tp6(r1, &(0x7f0000000c80)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000cc0)=0x20) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x402) 06:34:41 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:41 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3072.673798] FAULT_INJECTION: forcing a failure. [ 3072.673798] name failslab, interval 1, probability 0, space 0, times 0 [ 3072.720611] CPU: 0 PID: 24391 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3072.728519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3072.737906] Call Trace: [ 3072.740603] dump_stack+0x1fc/0x2ef [ 3072.744250] should_fail.cold+0xa/0xf [ 3072.748065] ? setup_fault_attr+0x200/0x200 [ 3072.752395] ? lock_acquire+0x170/0x3c0 [ 3072.756384] __should_failslab+0x115/0x180 [ 3072.760632] should_failslab+0x5/0x10 [ 3072.764444] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3072.769552] dd_init_queue+0x94/0x430 [ 3072.773365] blk_mq_init_sched+0x395/0x730 [ 3072.777621] elevator_init_mq+0xf0/0x180 [ 3072.781795] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 3072.787008] blk_mq_init_queue+0x5c/0xa0 [ 3072.791085] loop_add+0x2cb/0x8a0 [ 3072.794552] loop_control_ioctl+0x16c/0x480 [ 3072.798871] ? loop_lookup+0x1d0/0x1d0 [ 3072.802767] ? ksys_write+0x241/0x2a0 [ 3072.806585] ? loop_lookup+0x1d0/0x1d0 [ 3072.810479] do_vfs_ioctl+0xcdb/0x12e0 [ 3072.814375] ? lock_downgrade+0x720/0x720 06:34:41 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xfffffff9}, 0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:41 executing program 4: r0 = socket(0xa, 0x3, 0x3) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x85000041}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x48, 0x1404, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000008) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x181000) bind$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x401, @remote, 0x3f, 0x2}, 0x20) 06:34:41 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20420, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x501000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0xaab) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000100)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000200)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xc001) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000180)) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) write$FUSE_WRITE(r5, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x3}}, 0x18) [ 3072.818539] ? check_preemption_disabled+0x41/0x280 [ 3072.823568] ? ioctl_preallocate+0x200/0x200 [ 3072.828010] ? __fget+0x356/0x510 [ 3072.831479] ? do_dup2+0x450/0x450 [ 3072.835073] ? vfs_write+0x393/0x540 [ 3072.838869] ? fput+0x2b/0x190 [ 3072.842076] ksys_ioctl+0x9b/0xc0 [ 3072.845539] __x64_sys_ioctl+0x6f/0xb0 [ 3072.849436] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3072.854022] do_syscall_64+0xf9/0x620 [ 3072.857834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3072.863019] RIP: 0033:0x4665f9 [ 3072.866198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3072.885143] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3072.892851] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3072.900117] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3072.907391] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3072.914659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3072.921930] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:41 executing program 0: syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x80002, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000000c0)={{0x1, 0x5}, {0x40, 0x1}, 0x1, 0x1}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) 06:34:41 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 06:34:41 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 06:34:41 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:41 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:41 executing program 5 (fault-call:1 fault-nth:49): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:41 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000f21700fcffffff080001000000000000000000"], 0x20}}, 0x48000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000200)=0x5) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000100)={0x7f, 0xc5, 0x0, 'queue0\x00', 0x178}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0x80000) fcntl$getownex(r3, 0x10, &(0x7f0000000280)) 06:34:41 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000000)) [ 3073.182937] FAULT_INJECTION: forcing a failure. [ 3073.182937] name failslab, interval 1, probability 0, space 0, times 0 [ 3073.195618] CPU: 1 PID: 24435 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3073.203517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3073.212876] Call Trace: [ 3073.215476] dump_stack+0x1fc/0x2ef [ 3073.219116] should_fail.cold+0xa/0xf [ 3073.222924] ? setup_fault_attr+0x200/0x200 [ 3073.227341] ? lock_acquire+0x170/0x3c0 [ 3073.231310] __should_failslab+0x115/0x180 [ 3073.235546] should_failslab+0x5/0x10 [ 3073.239357] kmem_cache_alloc_trace+0x284/0x380 [ 3073.244028] rand_initialize_disk+0x3b/0xc0 [ 3073.248352] __alloc_disk_node+0x234/0x410 [ 3073.252581] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3073.257153] loop_add+0x39c/0x8a0 [ 3073.260601] loop_control_ioctl+0x16c/0x480 [ 3073.264911] ? loop_lookup+0x1d0/0x1d0 [ 3073.268795] ? ksys_write+0x241/0x2a0 [ 3073.272602] ? loop_lookup+0x1d0/0x1d0 [ 3073.276499] do_vfs_ioctl+0xcdb/0x12e0 [ 3073.280385] ? lock_downgrade+0x720/0x720 [ 3073.284639] ? check_preemption_disabled+0x41/0x280 [ 3073.289663] ? ioctl_preallocate+0x200/0x200 [ 3073.294072] ? __fget+0x356/0x510 [ 3073.297518] ? do_dup2+0x450/0x450 [ 3073.301083] ? vfs_write+0x393/0x540 [ 3073.305093] ? fput+0x2b/0x190 [ 3073.308293] ksys_ioctl+0x9b/0xc0 [ 3073.311760] __x64_sys_ioctl+0x6f/0xb0 [ 3073.315657] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3073.320442] do_syscall_64+0xf9/0x620 [ 3073.324315] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3073.329511] RIP: 0033:0x4665f9 [ 3073.332708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3073.351895] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3073.359594] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3073.366867] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3073.374149] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3073.381430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3073.388709] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:42 executing program 5 (fault-call:1 fault-nth:50): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) [ 3073.470380] FAULT_INJECTION: forcing a failure. [ 3073.470380] name failslab, interval 1, probability 0, space 0, times 0 [ 3073.494043] CPU: 1 PID: 24459 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3073.501975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3073.511337] Call Trace: [ 3073.513937] dump_stack+0x1fc/0x2ef 06:34:42 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) [ 3073.517586] should_fail.cold+0xa/0xf [ 3073.521405] ? setup_fault_attr+0x200/0x200 [ 3073.525762] ? lock_acquire+0x170/0x3c0 [ 3073.529751] __should_failslab+0x115/0x180 [ 3073.534095] should_failslab+0x5/0x10 [ 3073.537903] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 3073.543022] __alloc_disk_node+0x69/0x410 [ 3073.547180] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3073.551777] loop_add+0x39c/0x8a0 [ 3073.555251] loop_control_ioctl+0x16c/0x480 [ 3073.559601] ? loop_lookup+0x1d0/0x1d0 [ 3073.563622] ? ksys_write+0x241/0x2a0 [ 3073.567438] ? loop_lookup+0x1d0/0x1d0 [ 3073.571334] do_vfs_ioctl+0xcdb/0x12e0 [ 3073.575222] ? lock_downgrade+0x720/0x720 [ 3073.579361] ? check_preemption_disabled+0x41/0x280 [ 3073.584376] ? ioctl_preallocate+0x200/0x200 [ 3073.588879] ? __fget+0x356/0x510 [ 3073.592356] ? do_dup2+0x450/0x450 [ 3073.595880] ? vfs_write+0x393/0x540 [ 3073.599580] ? fput+0x2b/0x190 [ 3073.602759] ksys_ioctl+0x9b/0xc0 [ 3073.606212] __x64_sys_ioctl+0x6f/0xb0 [ 3073.610097] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3073.614675] do_syscall_64+0xf9/0x620 [ 3073.618490] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3073.623674] RIP: 0033:0x4665f9 [ 3073.626865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3073.645848] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3073.653545] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3073.660837] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 06:34:42 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 06:34:42 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3073.668144] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3073.675407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3073.682667] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:42 executing program 5 (fault-call:1 fault-nth:51): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:42 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:42 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:42 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:42 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 06:34:42 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400480, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3073.849677] FAULT_INJECTION: forcing a failure. [ 3073.849677] name failslab, interval 1, probability 0, space 0, times 0 [ 3073.866558] CPU: 1 PID: 24484 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3073.874469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3073.884124] Call Trace: [ 3073.886716] dump_stack+0x1fc/0x2ef [ 3073.890344] should_fail.cold+0xa/0xf [ 3073.894143] ? setup_fault_attr+0x200/0x200 [ 3073.898465] ? lock_acquire+0x170/0x3c0 [ 3073.902444] __should_failslab+0x115/0x180 [ 3073.906670] should_failslab+0x5/0x10 [ 3073.910467] kmem_cache_alloc_trace+0x284/0x380 [ 3073.915139] rand_initialize_disk+0x3b/0xc0 [ 3073.919461] __alloc_disk_node+0x234/0x410 [ 3073.923694] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3073.928279] loop_add+0x39c/0x8a0 [ 3073.931841] loop_control_ioctl+0x16c/0x480 [ 3073.936188] ? loop_lookup+0x1d0/0x1d0 [ 3073.940088] ? ksys_write+0x241/0x2a0 [ 3073.943899] ? loop_lookup+0x1d0/0x1d0 [ 3073.947788] do_vfs_ioctl+0xcdb/0x12e0 [ 3073.951665] ? lock_downgrade+0x720/0x720 [ 3073.955897] ? check_preemption_disabled+0x41/0x280 [ 3073.960924] ? ioctl_preallocate+0x200/0x200 [ 3073.965337] ? __fget+0x356/0x510 [ 3073.968792] ? do_dup2+0x450/0x450 [ 3073.972321] ? vfs_write+0x393/0x540 [ 3073.976039] ? fput+0x2b/0x190 [ 3073.979223] ksys_ioctl+0x9b/0xc0 [ 3073.982681] __x64_sys_ioctl+0x6f/0xb0 [ 3073.986570] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3073.991148] do_syscall_64+0xf9/0x620 [ 3073.994959] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3074.000137] RIP: 0033:0x4665f9 [ 3074.003328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3074.022236] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3074.029955] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3074.037280] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3074.044601] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3074.051860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3074.059133] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 06:34:42 executing program 5 (fault-call:1 fault-nth:52): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x1) 06:34:43 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000000), 0x10) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$FUSE_OPEN(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$FUSE_OPEN(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000080)={0x9, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:34:43 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x28200, 0x0) write$FUSE_OPEN(r1, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6}, 0x8) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3074.206632] FAULT_INJECTION: forcing a failure. [ 3074.206632] name failslab, interval 1, probability 0, space 0, times 0 06:34:43 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x444283, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:43 executing program 3: setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) 06:34:43 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) [ 3074.261477] CPU: 1 PID: 24504 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3074.269389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3074.278752] Call Trace: [ 3074.281357] dump_stack+0x1fc/0x2ef [ 3074.285003] should_fail.cold+0xa/0xf [ 3074.288852] ? setup_fault_attr+0x200/0x200 [ 3074.293173] ? lock_acquire+0x170/0x3c0 [ 3074.297167] __should_failslab+0x115/0x180 [ 3074.301401] should_failslab+0x5/0x10 [ 3074.305191] kmem_cache_alloc_trace+0x284/0x380 [ 3074.309851] device_create_groups_vargs+0x8a/0x270 [ 3074.314776] device_create+0xdf/0x120 [ 3074.318585] ? device_create_vargs+0x50/0x50 [ 3074.322988] ? pointer+0x850/0x850 [ 3074.326520] bdi_register_va.part.0+0x4c/0x750 [ 3074.331100] bdi_register+0x12a/0x140 [ 3074.334953] ? bdi_register_va+0x80/0x80 [ 3074.339044] ? vsnprintf+0x2cc/0x14f0 [ 3074.342843] bdi_register_owner+0x59/0x100 [ 3074.347079] __device_add_disk+0xd58/0x10c0 [ 3074.351520] ? sprintf+0xc0/0x100 [ 3074.354959] ? blk_alloc_devt+0x2d0/0x2d0 [ 3074.359105] ? __raw_spin_lock_init+0x28/0x100 [ 3074.363684] ? __lockdep_init_map+0x100/0x5a0 [ 3074.368271] loop_add+0x628/0x8a0 [ 3074.371723] loop_control_ioctl+0x16c/0x480 [ 3074.376044] ? loop_lookup+0x1d0/0x1d0 [ 3074.379945] ? ksys_write+0x241/0x2a0 [ 3074.383755] ? loop_lookup+0x1d0/0x1d0 [ 3074.387689] do_vfs_ioctl+0xcdb/0x12e0 [ 3074.391578] ? lock_downgrade+0x720/0x720 [ 3074.395723] ? check_preemption_disabled+0x41/0x280 [ 3074.400782] ? ioctl_preallocate+0x200/0x200 [ 3074.405202] ? __fget+0x356/0x510 [ 3074.408666] ? do_dup2+0x450/0x450 [ 3074.412202] ? vfs_write+0x393/0x540 [ 3074.415911] ? fput+0x2b/0x190 [ 3074.419089] ksys_ioctl+0x9b/0xc0 [ 3074.422527] __x64_sys_ioctl+0x6f/0xb0 [ 3074.426410] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3074.430986] do_syscall_64+0xf9/0x620 [ 3074.434787] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3074.439974] RIP: 0033:0x4665f9 [ 3074.443150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3074.462049] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3074.469776] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3074.477049] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3074.484323] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3074.491593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3074.498859] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 [ 3074.510238] ------------[ cut here ]------------ [ 3074.515685] WARNING: CPU: 1 PID: 24504 at block/genhd.c:719 __device_add_disk.cold+0x69/0x188 [ 3074.524351] Kernel panic - not syncing: panic_on_warn set ... [ 3074.524351] [ 3074.531726] CPU: 1 PID: 24504 Comm: syz-executor.5 Not tainted 4.19.206-syzkaller #0 [ 3074.540909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3074.550287] Call Trace: [ 3074.552965] dump_stack+0x1fc/0x2ef [ 3074.556621] panic+0x26a/0x50e [ 3074.559841] ? __warn_printk+0xf3/0xf3 [ 3074.563751] ? __device_add_disk.cold+0x69/0x188 [ 3074.568498] ? __probe_kernel_read+0x130/0x1b0 [ 3074.573089] ? __warn.cold+0x5/0x5a [ 3074.576718] ? __device_add_disk.cold+0x69/0x188 [ 3074.581474] __warn.cold+0x20/0x5a [ 3074.585012] ? io_schedule_timeout+0x140/0x140 [ 3074.589581] ? __device_add_disk.cold+0x69/0x188 [ 3074.594330] report_bug+0x262/0x2b0 [ 3074.598060] do_error_trap+0x1d7/0x310 [ 3074.601949] ? math_error+0x310/0x310 [ 3074.605736] ? __irq_work_queue_local+0x101/0x160 [ 3074.610573] ? irq_work_queue+0x29/0x80 [ 3074.614546] ? error_entry+0x72/0xd0 [ 3074.618254] ? trace_hardirqs_off_caller+0x6e/0x210 [ 3074.623359] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3074.628303] invalid_op+0x14/0x20 [ 3074.631764] RIP: 0010:__device_add_disk.cold+0x69/0x188 [ 3074.637121] Code: 02 84 c0 74 08 3c 03 0f 8e a8 00 00 00 44 8b a5 f0 05 00 00 e9 88 db 6a fb e8 26 80 66 f9 48 c7 c7 e0 74 b2 88 e8 00 76 f7 ff <0f> 0b e9 b0 e7 6a fb e8 0e 80 66 f9 48 c7 c7 e0 74 b2 88 e8 e8 75 [ 3074.656010] RSP: 0018:ffff888216347b38 EFLAGS: 00010286 [ 3074.661369] RAX: 0000000000000024 RBX: 0000000000000001 RCX: 0000000000000000 [ 3074.668646] RDX: 0000000000040000 RSI: ffffffff814e0d61 RDI: ffffed1042c68f59 [ 3074.675904] RBP: ffff8880a9fa0300 R08: 0000000000000024 R09: 0000000000000000 [ 3074.683167] R10: 0000000000000005 R11: 0000000000000000 R12: ffff8880a9fa0390 [ 3074.690430] R13: ffff8880a9fa0990 R14: 00000000fffffff4 R15: ffff8880a9fa0304 [ 3074.697701] ? vprintk_func+0x81/0x180 [ 3074.701679] ? __device_add_disk.cold+0x69/0x188 [ 3074.706446] ? sprintf+0xc0/0x100 [ 3074.709927] ? blk_alloc_devt+0x2d0/0x2d0 [ 3074.714121] ? __raw_spin_lock_init+0x28/0x100 [ 3074.718704] ? __lockdep_init_map+0x100/0x5a0 [ 3074.723192] loop_add+0x628/0x8a0 [ 3074.726643] loop_control_ioctl+0x16c/0x480 [ 3074.730953] ? loop_lookup+0x1d0/0x1d0 [ 3074.734847] ? ksys_write+0x241/0x2a0 [ 3074.738658] ? loop_lookup+0x1d0/0x1d0 [ 3074.742553] do_vfs_ioctl+0xcdb/0x12e0 [ 3074.746434] ? lock_downgrade+0x720/0x720 [ 3074.750565] ? check_preemption_disabled+0x41/0x280 [ 3074.755587] ? ioctl_preallocate+0x200/0x200 [ 3074.759992] ? __fget+0x356/0x510 [ 3074.763430] ? do_dup2+0x450/0x450 [ 3074.766952] ? vfs_write+0x393/0x540 [ 3074.770651] ? fput+0x2b/0x190 [ 3074.773837] ksys_ioctl+0x9b/0xc0 [ 3074.777290] __x64_sys_ioctl+0x6f/0xb0 [ 3074.781184] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3074.785750] do_syscall_64+0xf9/0x620 [ 3074.789537] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3074.794718] RIP: 0033:0x4665f9 [ 3074.797900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3074.816800] RSP: 002b:00007f7d4f01b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3074.824591] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 3074.831952] RDX: 0000000000000001 RSI: 0000000000004c80 RDI: 0000000000000003 [ 3074.839226] RBP: 00007f7d4f01b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3074.846512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3074.853773] R13: 00007ffe1f2422ef R14: 00007f7d4f01b300 R15: 0000000000022000 [ 3074.862822] Kernel Offset: disabled [ 3074.866524] Rebooting in 86400 seconds..