D_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000), 0x6) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:01 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x40, 0x8, 0xcbf7, 0xffff, 0xff}}}, 0x14) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008800}, 0x20048040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2808020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40800) 00:17:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:01 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:01 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x40, 0x8, 0xcbf7, 0xffff, 0xff}}}, 0x14) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008800}, 0x20048040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) 00:17:01 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r7 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") sendmsg$nl_route(r0, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) 00:17:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000), 0x6) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r8 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, r8, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:01 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000), 0x6) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:01 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:01 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x40, 0x8, 0xcbf7, 0xffff, 0xff}}}, 0x14) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008800}, 0x20048040) 00:17:01 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:01 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000), 0x6) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:01 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:01 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x40, 0x8, 0xcbf7, 0xffff, 0xff}}}, 0x14) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 00:17:01 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:01 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:01 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x40, 0x8, 0xcbf7, 0xffff, 0xff}}}, 0x14) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) 00:17:01 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 00:17:01 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:17:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:01 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:01 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x40, 0x8, 0xcbf7, 0xffff, 0xff}}}, 0x14) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:17:02 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x40, 0x8, 0xcbf7, 0xffff, 0xff}}}, 0x14) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:17:02 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) 00:17:02 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 00:17:02 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x40, 0x8, 0xcbf7, 0xffff, 0xff}}}, 0x14) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x8, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 2: 00:17:02 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x8, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) 00:17:02 executing program 2: 00:17:02 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 00:17:02 executing program 2: 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x8, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) 00:17:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 2: syz_emit_vhci(0x0, 0x0) 00:17:02 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:02 executing program 2: syz_emit_vhci(0x0, 0x0) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:02 executing program 2: syz_emit_vhci(0x0, 0x0) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:02 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0x0, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x40, 0x8, 0xcbf7, 0xffff, 0xff}}}, 0x14) 00:17:02 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x0, 0x40, 0x8, 0xcbf7, 0xffff, 0xff}}}, 0x14) 00:17:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x8088) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:02 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x0, 0x0, 0x8, 0xcbf7, 0xffff, 0xff}}}, 0x14) 00:17:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x8088) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:02 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x0, 0x0, 0x0, 0xcbf7, 0xffff, 0xff}}}, 0x14) 00:17:02 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0x0, 0x8088) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:02 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:02 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xff}}}, 0x14) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:02 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}}, 0x14) 00:17:02 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:02 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:02 executing program 2: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0x0, @fixed}}}, 0x14) 00:17:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0x0, 0x1000}, 0x48) 00:17:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:02 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:02 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:03 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:03 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x8, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:03 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:03 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:03 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:17:03 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:03 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000040)={{0xa, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:03 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 00:17:03 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:03 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:03 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:17:03 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 00:17:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x8, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 00:17:03 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:03 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x8, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x3, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x8, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:03 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x54e1, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:03 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xff, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:03 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x81}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:03 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) 00:17:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:03 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 00:17:03 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) 00:17:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12}, 0x48) 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40000) 00:17:03 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x0, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:03 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40000) 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x1, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:03 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) 00:17:03 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) 00:17:03 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40000) 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0xd12, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:03 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:03 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 00:17:03 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) 00:17:03 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) 00:17:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0x0, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:04 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) 00:17:04 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) 00:17:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x8088) 00:17:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0x0, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 00:17:04 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) 00:17:04 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) 00:17:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 00:17:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0x0, 0x0, 0x1, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:04 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 00:17:04 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) 00:17:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0xd12, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1}) 00:17:04 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:04 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) 00:17:04 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0xd12, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:17:04 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) 00:17:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:04 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) 00:17:04 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) 00:17:04 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:04 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) 00:17:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:04 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) 00:17:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440008ca}, 0x8088) 00:17:04 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:04 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) 00:17:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) 00:17:04 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r7 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") sendmsg$nl_route(r0, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) 00:17:04 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) 00:17:04 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 00:17:04 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) 00:17:04 executing program 4: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:04 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 00:17:04 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) 00:17:04 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) 00:17:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 00:17:04 executing program 1: pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RXATTRCREATE(r0, &(0x7f00000002c0)={0x7, 0x21, 0x1}, 0x7) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$P9_ROPEN(r0, &(0x7f0000000300)={0x18, 0x71, 0x1, {{0x0, 0x4, 0x3}, 0x1ff}}, 0x18) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0xfffffffffffffffe, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) socketpair(0x26, 0x5, 0x800, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4a1b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7b606e16fdd07b2a}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x9850}, 0x40000) 00:17:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) 00:17:04 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:17:04 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) 00:17:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) r1 = syz_clone(0x10000000, &(0x7f00000000c0)="387a00e5a414233726c6cdc425d8c8ff8bf5bf164f88270ce5c489c1f3bff72dc645c12a1a1bb0c2e5d39690b7659777b634de37146f06135918cdb10a9512471550e274f201549fcdcb84c2a9ae46b8199d2c5e5ba1699b96e1b621406d8d44d526537ec492f2001525eb9bae426d09b640325d3b52c4c62f07c77bedd38099d1b6e2f8fb402389ba79b37c4c9b4722ac5cad1fa4b4cd27b906a0dadb70da265007a9571da940", 0xa7, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000001080)="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") ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000280)={{0x3, 0x6, 0xffff, 0x5, 'syz1\x00', 0x5}, 0x3, 0x0, 0x8, r1, 0x8, 0x3b3, 'syz0\x00', &(0x7f0000000200)=['/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '\x00', '/dev/snd/controlC#\x00', 'j-)%-)$\x00', '\x00', '/dev/snd/controlC#\x00', '\x00'], 0x57}) syz_io_uring_complete(0x0) 00:17:04 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) 00:17:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x0, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) 00:17:04 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) 00:17:04 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:04 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) 00:17:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/23) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) 00:17:04 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) 00:17:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x0, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:04 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:04 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) 00:17:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:17:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/23) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) 00:17:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x0, 0xfffffffe, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:17:04 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:04 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) 00:17:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/23) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) 00:17:04 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) 00:17:04 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0x0, 0x1000, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:17:05 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) 00:17:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/23) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) 00:17:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:05 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) 00:17:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) 00:17:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/23) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x8202, 0x0) 00:17:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:05 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) 00:17:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0x0, 0x0, 0x1088, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) 00:17:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/23) 00:17:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) 00:17:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) 00:17:05 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/23) 00:17:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) 00:17:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) 00:17:05 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/23) 00:17:05 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 00:17:05 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) 00:17:05 executing program 1: ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/23) 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) 00:17:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x0, 0x0, 0x1000}, 0x48) 00:17:05 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) 00:17:05 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/23) 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) 00:17:05 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/23) 00:17:05 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) 00:17:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) 00:17:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) 00:17:05 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/23) 00:17:05 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) 00:17:05 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) 00:17:05 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) 00:17:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/23) 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r0) 00:17:05 executing program 2: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x4000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 00:17:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/23) 00:17:05 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r0) 00:17:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/23) 00:17:05 executing program 2: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x4000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 00:17:05 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 2: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 00:17:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/23) 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r0) 00:17:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 2: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) 00:17:05 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:17:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x8001) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c76000023423fad21d97f4a04ad9a9b55caaf0c6a266bdbc34cd77abf39474262da5244d7e4674f43713b74883005336dafb4d1a4dfa4666260b23415d71e79177072f81aaefca993dd61eaaa8f635be8a6eddb78bec7d8204c65dff6e20b7fd1cc734168180ea2ef88204032e02cdf3de10cc718ef42d83b533bdbb18d7add7318f066c8b2d8cf8a15400743f8aead8e431ff203bf2e7938390eb43433b6a6829a332e74f581997cbfc54aa0169cf035c99adac1f916a1670757aade0e5e3e8e0acf8504d5", @ANYRES16=r4, @ANYBLOB="02002bbd7000fddbdf250f00000008003b0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44094) 00:17:05 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x401) 00:17:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) 00:17:05 executing program 2: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) 00:17:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 00:17:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) 00:17:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:17:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x8001) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c76000023423fad21d97f4a04ad9a9b55caaf0c6a266bdbc34cd77abf39474262da5244d7e4674f43713b74883005336dafb4d1a4dfa4666260b23415d71e79177072f81aaefca993dd61eaaa8f635be8a6eddb78bec7d8204c65dff6e20b7fd1cc734168180ea2ef88204032e02cdf3de10cc718ef42d83b533bdbb18d7add7318f066c8b2d8cf8a15400743f8aead8e431ff203bf2e7938390eb43433b6a6829a332e74f581997cbfc54aa0169cf035c99adac1f916a1670757aade0e5e3e8e0acf8504d5", @ANYRES16=r4, @ANYBLOB="02002bbd7000fddbdf250f00000008003b0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44094) 00:17:06 executing program 2: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) 00:17:06 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:17:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 00:17:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) 00:17:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:06 executing program 2: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:17:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x8001) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c76000023423fad21d97f4a04ad9a9b55caaf0c6a266bdbc34cd77abf39474262da5244d7e4674f43713b74883005336dafb4d1a4dfa4666260b23415d71e79177072f81aaefca993dd61eaaa8f635be8a6eddb78bec7d8204c65dff6e20b7fd1cc734168180ea2ef88204032e02cdf3de10cc718ef42d83b533bdbb18d7add7318f066c8b2d8cf8a15400743f8aead8e431ff203bf2e7938390eb43433b6a6829a332e74f581997cbfc54aa0169cf035c99adac1f916a1670757aade0e5e3e8e0acf8504d5", @ANYRES16=r4, @ANYBLOB="02002bbd7000fddbdf250f00000008003b0006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44094) 00:17:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 00:17:06 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:17:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 00:17:06 executing program 2: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:17:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 00:17:06 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:17:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x8001) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) 00:17:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:06 executing program 2: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:17:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 00:17:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:17:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x8001) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) 00:17:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x8001) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) 00:17:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:17:06 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 00:17:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x8001) 00:17:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x8001) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) 00:17:06 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 00:17:06 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) 00:17:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:17:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:17:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x8001) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) 00:17:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), 0x0) 00:17:06 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 00:17:06 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r0) 00:17:06 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 00:17:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x8001) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) 00:17:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:17:06 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 00:17:06 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) 00:17:06 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") 00:17:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000000c0)=0x8001) 00:17:06 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 00:17:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 00:17:06 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) 00:17:06 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 00:17:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) 00:17:06 executing program 5: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x8100) 00:17:06 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x64132, 0xffffffffffffffff, 0x0) 00:17:06 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r0) 00:17:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04223905aaaaaaaaaa12020058047d02003fffffffffffff02e19d868e060003ffffffffffff86077a6376ab0a00ffffffffffff203f1a97ae3b0e00"], 0x3c) 00:17:06 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 00:17:06 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:17:06 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x8100) 00:17:06 executing program 1: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) 00:17:06 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) [ 1026.784879][ T5944] Bluetooth: hci2: Malformed HCI Event: 0x22 00:17:06 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) 00:17:06 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:17:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04223905aaaaaaaaaa12020058047d02003fffffffffffff02e19d868e060003ffffffffffff86077a6376ab0a00ffffffffffff203f1a97ae3b0e00"], 0x3c) 00:17:06 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) [ 1026.845537][ T5944] Bluetooth: hci2: Malformed HCI Event: 0x22 00:17:06 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x64132, 0xffffffffffffffff, 0x0) 00:17:06 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x8100) 00:17:06 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:17:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04223905aaaaaaaaaa12020058047d02003fffffffffffff02e19d868e060003ffffffffffff86077a6376ab0a00ffffffffffff203f1a97ae3b0e00"], 0x3c) 00:17:06 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 0: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) [ 1026.929531][ T5944] Bluetooth: hci2: Malformed HCI Event: 0x22 00:17:06 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) 00:17:06 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x64132, 0xffffffffffffffff, 0x0) 00:17:06 executing program 4: 00:17:06 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x8100) 00:17:06 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:06 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000040)={0x8, 0x3, 0x0, 0x7, 'syz0\x00', 0x8001}) r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x30801) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0xac9d) 00:17:06 executing program 4: 00:17:07 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) 00:17:07 executing program 3: syz_open_dev$dri(0x0, 0x1, 0x8100) 00:17:07 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:17:07 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000040)={0x8, 0x3, 0x0, 0x7, 'syz0\x00', 0x8001}) r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x30801) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0xac9d) 00:17:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 00:17:07 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:17:07 executing program 4: 00:17:07 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:07 executing program 3: syz_open_dev$dri(0x0, 0x1, 0x8100) 00:17:07 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000040)={0x8, 0x3, 0x0, 0x7, 'syz0\x00', 0x8001}) r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x30801) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0xac9d) 00:17:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 00:17:07 executing program 4: syz_emit_vhci(0x0, 0x3c) 00:17:07 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:17:07 executing program 3: syz_open_dev$dri(0x0, 0x1, 0x8100) 00:17:07 executing program 4: syz_emit_vhci(0x0, 0x3c) 00:17:07 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000040)={0x8, 0x3, 0x0, 0x7, 'syz0\x00', 0x8001}) syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x30801) 00:17:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0) 00:17:07 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x8100) 00:17:07 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:07 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x8100) 00:17:07 executing program 4: syz_emit_vhci(0x0, 0x3c) 00:17:07 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x7, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x40, 0x40, "2a6dd6", 0x9, 0xc, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) syz_open_dev$admmidi(&(0x7f0000000000), 0x1000, 0x420001) 00:17:07 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x30801) 00:17:07 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x8100) 00:17:07 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x8100) 00:17:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3c) 00:17:07 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:07 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x7, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x40, 0x40, "2a6dd6", 0x9, 0xc, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) syz_open_dev$admmidi(&(0x7f0000000000), 0x1000, 0x420001) 00:17:07 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x8100) 00:17:07 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x8100) 00:17:07 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x30801) 00:17:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3c) [ 1027.312205][ T5944] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 00:17:07 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x7, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x40, 0x40, "2a6dd6", 0x9, 0xc, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) syz_open_dev$admmidi(&(0x7f0000000000), 0x1000, 0x420001) 00:17:07 executing program 2: syz_open_dev$dri(0x0, 0x1, 0x8100) 00:17:07 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) [ 1027.378288][ T5944] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 00:17:07 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:07 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x7, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x40, 0x40, "2a6dd6", 0x9, 0xc, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:07 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x30801) 00:17:07 executing program 2: syz_open_dev$dri(0x0, 0x1, 0x8100) [ 1027.425862][ T5944] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 00:17:07 executing program 5: 00:17:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3c) 00:17:07 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x8100) 00:17:07 executing program 5: 00:17:07 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x30801) 00:17:07 executing program 2: syz_open_dev$dri(0x0, 0x1, 0x8100) 00:17:07 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:07 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x8100) 00:17:07 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x8100) 00:17:07 executing program 5: 00:17:07 executing program 1: r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:07 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x8100) 00:17:07 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) 00:17:07 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x8100) 00:17:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:07 executing program 5: syz_emit_vhci(0x0, 0x0) 00:17:07 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x8100) 00:17:07 executing program 1: r0 = syz_clone(0x0, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:07 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x8100) 00:17:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:07 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) 00:17:07 executing program 5: syz_emit_vhci(0x0, 0x0) 00:17:07 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x8100) 00:17:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04223905aaaaaaaaaa12020058047d02003fffffffffffff02e19d868e06"], 0x3c) 00:17:07 executing program 2: syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) 00:17:07 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:07 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) 00:17:07 executing program 5: syz_emit_vhci(0x0, 0x0) [ 1027.461646][ T5944] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1027.770896][ T5944] Bluetooth: hci2: Malformed HCI Event: 0x22 00:17:07 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x8100) 00:17:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:07 executing program 0: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x8100) 00:17:07 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:07 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x7, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}]}}}, 0x102) 00:17:07 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:07 executing program 0: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x8100) 00:17:07 executing program 3: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) 00:17:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:07 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:07 executing program 0: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x8100) 00:17:07 executing program 3: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:07 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x7, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}]}}}, 0x102) 00:17:07 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:07 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x8100) 00:17:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04223905aaaaaaaaaa12020058047d"], 0x3c) [ 1027.999640][ T5944] Bluetooth: hci2: Malformed HCI Event: 0x22 00:17:07 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x7, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}]}}}, 0x102) 00:17:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:08 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x8100) 00:17:08 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:08 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:08 executing program 3: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 0: syz_open_dev$dri(0x0, 0x0, 0x8100) 00:17:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x7, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x40, "2a6dd6", 0x9, 0xc, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:08 executing program 0: syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) 00:17:08 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04223905aaaaaaaa"], 0x3c) 00:17:08 executing program 2: process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x7, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x9, 0xc, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:08 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() r4 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r4}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) [ 1028.141109][ T5944] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1028.192192][ T5944] Bluetooth: hci2: Malformed HCI Event: 0x22 00:17:08 executing program 3: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x3c) [ 1028.223254][ T5944] Bluetooth: hci2: Received unexpected HCI Event 0x00 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x3c) 00:17:08 executing program 2: process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) [ 1028.247288][ T5944] Bluetooth: hci2: Received unexpected HCI Event 0x00 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x3c) [ 1028.264430][ T5944] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1028.280010][ T5944] Bluetooth: hci2: Received unexpected HCI Event 0x00 00:17:08 executing program 3: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x7, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0xc, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:08 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04223905aa"], 0x3c) 00:17:08 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) [ 1028.339321][ T5944] Bluetooth: hci2: Malformed HCI Event: 0x22 00:17:08 executing program 3: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() r4 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r4}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:08 executing program 2: process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 3: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04223905aa"], 0x3c) 00:17:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x7, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:08 executing program 3: r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) [ 1028.350926][ T5944] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1028.432231][ T5944] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1028.440256][ T5944] Bluetooth: hci2: Malformed HCI Event: 0x22 00:17:08 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x7, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04223905aa"], 0x3c) 00:17:08 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) [ 1028.490759][ T5944] Bluetooth: hci2: Malformed HCI Event: 0x22 00:17:08 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() r4 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r4}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x3c) 00:17:08 executing program 3: r0 = syz_clone(0x0, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:08 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:08 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x3c) 00:17:08 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x102) 00:17:08 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x3c) 00:17:08 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:08 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x102) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04223905"], 0x3c) 00:17:08 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x102) [ 1028.555163][ T5944] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1028.740692][ T5944] Bluetooth: hci2: Malformed HCI Event: 0x22 00:17:08 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042239"], 0x3c) 00:17:08 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:08 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x0, 0x5, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:08 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042239"], 0x3c) 00:17:08 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:08 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x0, 0x0, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:08 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042239"], 0x3c) 00:17:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x0, 0x0, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:08 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:08 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:08 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x0, 0x0, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:08 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x0, 0x0, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:08 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:08 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) syz_io_uring_complete(0x0) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440), 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x0, 0x5, "d8d4a5", 0x0, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:09 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x0, 0x0, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:09 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x0, 0x5, "d8d4a5", 0x0, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:09 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x0, 0x0, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:09 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 5: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x0, 0x5, "d8d4a5", 0x0, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:09 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440), 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 4: 00:17:09 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 5: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0), 0x800) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440), 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 4: 00:17:09 executing program 5: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 4: 00:17:09 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 5: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 4: syz_emit_vhci(0x0, 0x0) 00:17:09 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 5: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 0: setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 4: syz_emit_vhci(0x0, 0x0) 00:17:09 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 5: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 4: syz_emit_vhci(0x0, 0x0) 00:17:09 executing program 5: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0), 0x800) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x0, 0x0, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}]}}}, 0x102) 00:17:09 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 5: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x0, 0x0, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}]}}}, 0x102) 00:17:09 executing program 5: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 00:17:09 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x0, 0x0, "d8d4a5", 0x1, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}]}}}, 0x102) 00:17:09 executing program 5: setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 00:17:09 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x102) 00:17:09 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 00:17:09 executing program 0: process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x102) 00:17:09 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 00:17:09 executing program 0: process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x102) 00:17:09 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:09 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1fd}, {0x2, [{@any, 0x0, 0x0, "d8d4a5", 0x0, 0x0, "aed63b4bed5f1113eb0aa01d30e858139b1f861be530d7cf826ffb7c0bc860e312c821b429e9e917c79b826058f9100e875df096674518e95a96d028dbad110d44f16015cd2c6c6175eb66de8d24e396f1519d9cbbf20a9c8b39330c2d6851a9cccfeba1513ca7380126b37f90249f22e90546c3dc98a1ee09e8930946ea3c34d37cf5ac00f040c03af0bd73bbf21541f50fb94bc39722b9bfa36658ac60f83462aba5a5d6265207be43b46b21916e8e74a33c7d34440957b3c5c881244f636436a991a5f91d618238544f32c12177dcc2cc05b6b4c4586e60b6b08663a0a0a78cc48478941400"}, {@any, 0x0, 0x0, "2a6dd6", 0x0, 0x0, "d65fbe232abad44c06f437284101dc9fbc844b5170d752b0cc342bd9c5caa4073e17bc34aa75ce152f4fcce0b545cb655ba26a97a5fb58a10c797cf7f2b31d4a899ebcd3ef7a724c6a2e942677bf503c19689076d604df48265810d32c07ad438e72fadd0086e97f000000000000006e2d7f44d6812e049e8ac1e16edd67ed8d2c03ee0b134d300a29713affd57a6d57aa3eb55ab93ffef31a3586dc88f7abe1be9505caa4cabf99a2241d4d428873a66e2b4ecd8affa61b957bad2450c5c9ece128908ca9fd6d73b42b54350943fb01d036243e255f456579275c69d598196300950191589d571478612cecad324b7b"}]}}}, 0x200) 00:17:09 executing program 0: process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:09 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:09 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:10 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 5: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:10 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 5: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 4: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 5: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 4: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 4: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:10 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:10 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{0x0}, {0x0}], 0x2, 0x0) 00:17:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:10 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{0x0}, {0x0}], 0x2, 0x0) 00:17:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:10 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{0x0}, {0x0}], 0x2, 0x0) 00:17:10 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:10 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:10 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:10 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:10 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:11 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:11 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:11 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:11 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:11 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:11 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:11 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:11 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}, {0x0}], 0x2, 0x0) 00:17:11 executing program 2: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 2: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}, {0x0}], 0x2, 0x0) 00:17:11 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:11 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 2: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}, {0x0}], 0x2, 0x0) 00:17:11 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:11 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:11 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {0x0}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:11 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:11 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:11 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:11 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:11 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:11 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:11 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:11 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:11 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}], 0x5, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 1: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:12 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:12 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 1: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, 0x0, 0x0, 0x0) 00:17:12 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 1: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680), 0x0, 0x0) 00:17:12 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, 0x0, 0x0, 0x0) 00:17:12 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680), 0x0, 0x0) 00:17:12 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, 0x0, 0x0, 0x0) 00:17:12 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680), 0x0, 0x0) 00:17:12 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, 0x0, 0x0, 0x0) 00:17:12 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:12 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:12 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, 0x0, 0x0, 0x0) 00:17:12 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:12 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, 0x0, 0x0, 0x0) 00:17:12 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:12 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:12 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:12 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:12 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:12 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:12 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:12 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:12 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:12 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:12 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}, {0x0}], 0x2, 0x0) 00:17:12 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:12 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:12 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}, {0x0}], 0x2, 0x0) 00:17:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:13 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}, {0x0}], 0x2, 0x0) 00:17:13 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:13 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:13 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:13 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:13 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:13 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:13 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:13 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}, {0x0}], 0x2, 0x0) 00:17:13 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:13 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}, {0x0}], 0x2, 0x0) 00:17:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 0: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:13 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:13 executing program 0: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}], 0x3, &(0x7f0000003680)=[{0x0}, {0x0}], 0x2, 0x0) 00:17:13 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x0, 0x0, 0x0) 00:17:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 0: process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680), 0x0, 0x0) 00:17:13 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:13 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x0, 0x0, 0x0) 00:17:13 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:13 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x0, 0x0, 0x0) 00:17:13 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680), 0x0, 0x0) 00:17:13 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:13 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x3c) 00:17:13 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:13 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x3c) 00:17:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) [ 1028.843768][ T5944] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1033.915378][ T5944] Bluetooth: hci2: Received unexpected HCI Event 0x00 00:17:13 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680), 0x0, 0x0) 00:17:13 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x3c) 00:17:13 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x3c) 00:17:13 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) [ 1033.986493][ T5944] Bluetooth: hci2: Received unexpected HCI Event 0x00 00:17:13 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:13 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:13 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x3c) 00:17:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x3c) [ 1034.052075][ T5944] Bluetooth: hci2: Received unexpected HCI Event 0x00 00:17:14 executing program 3: 00:17:14 executing program 4: 00:17:14 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 3: 00:17:14 executing program 4: 00:17:14 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:14 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:14 executing program 4: 00:17:14 executing program 3: 00:17:14 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 3: syz_emit_vhci(0x0, 0x3c) 00:17:14 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 4: syz_emit_vhci(0x0, 0x3c) 00:17:14 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:14 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:14 executing program 3: syz_emit_vhci(0x0, 0x3c) 00:17:14 executing program 4: syz_emit_vhci(0x0, 0x3c) 00:17:14 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680), 0x0, 0x0) 00:17:14 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:14 executing program 3: syz_emit_vhci(0x0, 0x3c) 00:17:14 executing program 4: syz_emit_vhci(0x0, 0x3c) 00:17:14 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3c) 00:17:14 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680), 0x0, 0x0) 00:17:14 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:14 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:14 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3c) 00:17:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3c) 00:17:14 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3c) 00:17:14 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680), 0x0, 0x0) 00:17:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3c) 00:17:14 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:14 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:14 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3c) 00:17:14 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000034c0)=""/232, 0xe8}], 0x1, 0x0) 00:17:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:14 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:14 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x0) 00:17:14 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:14 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:14 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:14 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000034c0)=""/232, 0xe8}], 0x1, 0x0) 00:17:14 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c) 00:17:14 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x3c) 00:17:14 executing program 5: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() r4 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r4}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:14 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() r4 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r4}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:14 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:14 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) [ 1034.839932][ T5944] Bluetooth: hci5: Received unexpected HCI Event 0x00 00:17:14 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x3c) 00:17:14 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{&(0x7f00000034c0)=""/232, 0xe8}], 0x1, 0x0) [ 1034.913645][ T5944] Bluetooth: hci5: Received unexpected HCI Event 0x00 00:17:14 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:14 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:14 executing program 3: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x3c) 00:17:14 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() r4 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r4}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:14 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {0x0}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) [ 1034.962035][ T5944] Bluetooth: hci5: Received unexpected HCI Event 0x00 00:17:14 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{0x0}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:14 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() r4 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r4}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:15 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() r4 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r4}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:15 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{0x0}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:15 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() r4 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r4}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:15 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:15 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, &(0x7f0000003680)=[{0x0}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:15 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) r3 = getuid() r4 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r4}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) setresuid(0xffffffffffffffff, r3, 0xffffffffffffffff) 00:17:15 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") sendmsg$nl_route(r0, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000001400)={{0x8, 0x3, 0x5, 0x9, '\x00', 0x6e}, 0x4, 0x0, 0x3, r6, 0x1, 0xb73f, 'syz0\x00', &(0x7f00000013c0)=['IPVS\x00'], 0x5}) process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000180)={{0x1, 0x4, 0x4, 0x5, 'syz1\x00', 0x2}, 0x0, 0x1, 0x8709, 0x0, 0x7, 0x1, 'syz0\x00', &(0x7f0000000140)=['\x00', '\x00', '\x00', '\x00', '*\x00', '\x00', '\x00'], 0x8}) 00:17:15 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() r3 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r3}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, 0x0, 0x0, 0x0) 00:17:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:15 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() r3 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r3}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:15 executing program 2: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {0x0}, {0x0}, {&(0x7f0000000280)=""/191, 0xbf}, {0x0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 00:17:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, 0x0, 0x0, 0x0) 00:17:15 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) 00:17:15 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") sendmsg$nl_route(r0, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000001400)={{0x8, 0x3, 0x5, 0x9, '\x00', 0x6e}, 0x4, 0x0, 0x3, r6, 0x1, 0xb73f, 'syz0\x00', &(0x7f00000013c0)=['IPVS\x00'], 0x5}) process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000180)={{0x1, 0x4, 0x4, 0x5, 'syz1\x00', 0x2}, 0x0, 0x1, 0x8709, 0x0, 0x7, 0x1, 'syz0\x00', &(0x7f0000000140)=['\x00', '\x00', '\x00', '\x00', '*\x00', '\x00', '\x00'], 0x8}) 00:17:15 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) 00:17:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, 0x0, 0x0, 0x0) 00:17:15 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() r3 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r3}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000034c0)=""/232, 0xe8}], 0x1, 0x0) 00:17:15 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") 00:17:15 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") 00:17:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:15 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() 00:17:15 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") sendmsg$nl_route(r0, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000001400)={{0x8, 0x3, 0x5, 0x9, '\x00', 0x6e}, 0x4, 0x0, 0x3, r6, 0x1, 0xb73f, 'syz0\x00', &(0x7f00000013c0)=['IPVS\x00'], 0x5}) process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000180)={{0x1, 0x4, 0x4, 0x5, 'syz1\x00', 0x2}, 0x0, 0x1, 0x8709, 0x0, 0x7, 0x1, 'syz0\x00', &(0x7f0000000140)=['\x00', '\x00', '\x00', '\x00', '*\x00', '\x00', '\x00'], 0x8}) 00:17:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000034c0)=""/232, 0xe8}], 0x1, 0x0) 00:17:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:15 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() r3 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r3}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:15 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) 00:17:15 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() 00:17:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000034c0)=""/232, 0xe8}], 0x1, 0x0) 00:17:15 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) syz_io_uring_complete(0x0) 00:17:15 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() r3 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) capget(&(0x7f00000003c0)={0x20071026, r3}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680), 0x0, 0x0) 00:17:15 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) 00:17:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:15 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") sendmsg$nl_route(r0, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000001400)={{0x8, 0x3, 0x5, 0x9, '\x00', 0x6e}, 0x4, 0x0, 0x3, r6, 0x1, 0xb73f, 'syz0\x00', &(0x7f00000013c0)=['IPVS\x00'], 0x5}) process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) 00:17:15 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) 00:17:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680), 0x0, 0x0) 00:17:15 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) syz_io_uring_complete(0x0) 00:17:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:15 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:15 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) 00:17:15 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") sendmsg$nl_route(r0, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000001400)={{0x8, 0x3, 0x5, 0x9, '\x00', 0x6e}, 0x4, 0x0, 0x3, r6, 0x1, 0xb73f, 'syz0\x00', &(0x7f00000013c0)=['IPVS\x00'], 0x5}) process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:15 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() r3 = syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") capget(&(0x7f00000003c0)={0x20071026, r3}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680), 0x0, 0x0) 00:17:15 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:15 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{0x0}, {&(0x7f00000034c0)=""/232, 0xe8}], 0x2, 0x0) 00:17:15 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:15 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") sendmsg$nl_route(r0, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:15 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:15 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:15 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:15 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680), 0x0, 0x0) 00:17:16 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:16 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{0x0}, {&(0x7f00000000c0)=""/213, 0xd5}], 0x2, &(0x7f0000003680)=[{0x0}], 0x1, 0x0) 00:17:16 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) syz_io_uring_complete(0x0) capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") sendmsg$nl_route(r0, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 0: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") sendmsg$nl_route(r0, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000001400)={{0x8, 0x3, 0x5, 0x9, '\x00', 0x6e}, 0x4, 0x0, 0x3, r6, 0x1, 0xb73f, 'syz0\x00', &(0x7f00000013c0)=['IPVS\x00'], 0x5}) process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 3: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 4: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") sendmsg$nl_route(r0, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 4: pipe2$9p(0x0, 0x800) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0), 0x800) capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 3: pipe2$9p(0x0, 0x800) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 4: pipe2$9p(0x0, 0x800) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 0: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") sendmsg$nl_route(r0, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 3: pipe2$9p(0x0, 0x800) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 4: pipe2$9p(0x0, 0x800) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) 00:17:16 executing program 2: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)) capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 3: pipe2$9p(0x0, 0x800) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 2: capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 0: socketpair(0x2b, 0x3, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c8009600c383ac69abd337e21b7f1053cad42cdfb01a5519bfec1fe92a8a9137ee42e29c1f0ee797ea6e98a4080f2dcfbc6f1eabec85e3b4f3cc8630dea1df15aa89cde52355686f4e0cf6fb4a2c3795b3ae562d4a21c3e8418116094b2c27207902b975246117cc98655bdaffd2263491a50d17dbe2fe36f122a3f7ba80e36c5d4dd065347509c5136fc649dc245f00"/154], 0x9a) r2 = syz_io_uring_complete(0x0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x8001, 0x0, 0xffffffffffffff68, 0xfff, 0xf65, 0x6, 0x1, 0xd7, 0xffff}}, 0x43) getuid() syz_clone(0x0, &(0x7f0000000240)="8e6eaf05a5f19103e4a8d8bb0c5894174692b003bbef7a37bd78b1f5dbd720a159a17c7c72458f53012396409fc095f1e4786848274819", 0x37, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="94ade68d3a8c62ab2ed63e168c5f0968d7bbd25230401b920bd1a7382559660e5049493a51aed0f6d4ce2f4da067e8b69e5dcb8f7e1cf9fb47f9cb97ca9217fc31ee2a39a569bd21372a72009a23af598e89eb0ec253722ed60757338a3455af2a108cbf75565a9f9806204956d1411fbf1a862513b8689cb7114ca35603c35be13325caad2cbbe147e5ba236e8c442ad1587f75a4286dfa871dc4b95b54d58d68") socket$nl_route(0x10, 0x3, 0x0) 00:17:16 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) r5 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r5, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 2: capget(0x0, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 3: pipe2$9p(&(0x7f00000000c0), 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) r5 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r5, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x91}, "0612880df7ccb5cfc2b03ed43be67c4a0892571f548efaa30493617843e5a0bb0855674e3902d7a41e562105462baf19e9506081f5c3558a25057234d36ac0306cc2a413d71c54ec19832194fca3dbfec01f800a7250915115f51d09168dec37d29d85755e9dd8e9b20c0c6c37a193c1a5945df7f5d8209a5b3f8beaef7cc86a78667e5f2e907391b1c7d9be44f117759a"}, 0x95) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x40000000, &(0x7f0000000080)) 00:17:16 executing program 2: capget(0x0, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 3: pipe2$9p(&(0x7f00000000c0), 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x91}, "0612880df7ccb5cfc2b03ed43be67c4a0892571f548efaa30493617843e5a0bb0855674e3902d7a41e562105462baf19e9506081f5c3558a25057234d36ac0306cc2a413d71c54ec19832194fca3dbfec01f800a7250915115f51d09168dec37d29d85755e9dd8e9b20c0c6c37a193c1a5945df7f5d8209a5b3f8beaef7cc86a78667e5f2e907391b1c7d9be44f117759a"}, 0x95) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x40000000, &(0x7f0000000080)) 00:17:16 executing program 3: pipe2$9p(&(0x7f00000000c0), 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:16 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 2: capget(0x0, &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) r5 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r5, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x91}, "0612880df7ccb5cfc2b03ed43be67c4a0892571f548efaa30493617843e5a0bb0855674e3902d7a41e562105462baf19e9506081f5c3558a25057234d36ac0306cc2a413d71c54ec19832194fca3dbfec01f800a7250915115f51d09168dec37d29d85755e9dd8e9b20c0c6c37a193c1a5945df7f5d8209a5b3f8beaef7cc86a78667e5f2e907391b1c7d9be44f117759a"}, 0x95) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x40000000, &(0x7f0000000080)) 00:17:16 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 00:17:16 executing program 2: capget(&(0x7f00000003c0), &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) r3 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r3, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) wait4(0xffffffffffffffff, &(0x7f0000000000), 0x40000000, &(0x7f0000000080)) 00:17:16 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 00:17:16 executing program 2: capget(&(0x7f00000003c0), &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 0: wait4(0xffffffffffffffff, &(0x7f0000000000), 0x40000000, &(0x7f0000000080)) 00:17:16 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:16 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) 00:17:16 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r6 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r6, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r3 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r3, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:16 executing program 2: capget(&(0x7f00000003c0), &(0x7f0000000400)={0xffffa173, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:16 executing program 0: wait4(0xffffffffffffffff, 0x0, 0x40000000, &(0x7f0000000080)) 00:17:16 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) r5 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r5, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 2: capget(&(0x7f00000003c0)={0x20071026}, 0x0) 00:17:17 executing program 0: wait4(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x1, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:17 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r3, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 0: wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:17:17 executing program 2: capget(&(0x7f00000003c0)={0x20071026}, 0x0) 00:17:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x6, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:17 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) r5 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r5, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r1, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 0: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r3, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0xe3, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 2: capget(&(0x7f00000003c0)={0x20071026}, 0x0) 00:17:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:17 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r1 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r1, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) r5 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r5, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 0: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) r5 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r5, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x1ff, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:17 executing program 2: capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0x0, 0x9, 0x23d, 0x97, 0x1, 0x4}) 00:17:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0xfff, 0x5}}, 0x43) 00:17:17 executing program 5: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)) r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 2: capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0x0, 0x0, 0x23d, 0x97, 0x1, 0x4}) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) r3 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r3, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 0: capget(&(0x7f00000003c0)={0x20071026}, 0x0) 00:17:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x5}}, 0x43) 00:17:17 executing program 2: capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x97, 0x1, 0x4}) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 5: r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r3 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r3, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 0: capget(&(0x7f00000003c0)={0x20071026}, 0x0) 00:17:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x5}}, 0x43) 00:17:17 executing program 2: capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4}) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x5}}, 0x43) 00:17:17 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r3 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r3, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 5: r0 = syz_clone(0x0, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 0: capget(&(0x7f00000003c0)={0x20071026}, 0x0) 00:17:17 executing program 2: capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 00:17:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x43) 00:17:17 executing program 0: capget(0x0, 0x0) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 2: capget(&(0x7f00000003c0)={0x20071026}, &(0x7f0000000400)) 00:17:17 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) r1 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r1, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 2: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) r3 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r3, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43}, 0x43) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 0: capget(0x0, 0x0) 00:17:17 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r1 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r1, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43}, 0x43) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 0: capget(0x0, 0x0) 00:17:17 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:17 executing program 1: socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)) r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r2) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x1ad3d06ddd79a0bb}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43}, 0x43) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 0: capget(&(0x7f00000003c0), 0x0) 00:17:17 executing program 1: r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0xe6, 0xc323, 0x6, 0xc32, 0xeb}}}}, 0x17) wait4(0x0, &(0x7f0000000040), 0x40000000, &(0x7f0000000080)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x2) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43}, 0x43) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) 00:17:17 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 0: capget(&(0x7f00000003c0), 0x0) 00:17:17 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 0: capget(&(0x7f00000003c0), 0x0) 00:17:17 executing program 1: r0 = syz_clone(0x0, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:17 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43}, 0x43) write$P9_RRENAME(r0, 0x0, 0x0) 00:17:17 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0xe6, 0xc323, 0x6, 0xc32, 0xeb}}}}, 0x17) wait4(0x0, &(0x7f0000000040), 0x40000000, &(0x7f0000000080)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x2) 00:17:17 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43}, 0x43) write$P9_RRENAME(r0, 0x0, 0x0) 00:17:18 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0xe6, 0xc323, 0x6, 0xc32, 0xeb}}}}, 0x17) wait4(0x0, &(0x7f0000000040), 0x40000000, &(0x7f0000000080)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x2) 00:17:18 executing program 0: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r6) r7 = syz_io_uring_complete(0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r6) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r8, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x98, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40018c0}, 0x24040800) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x62e994250c312d95) 00:17:18 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x0, 0xa}, {0xe6, 0xc323, 0x6, 0xc32, 0xeb}}}}, 0x17) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x2) 00:17:18 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43}, 0x43) write$P9_RRENAME(r0, 0x0, 0x0) 00:17:18 executing program 3: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x2) 00:17:18 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43}, 0x43) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7}, 0x7) 00:17:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r6) r7 = syz_io_uring_complete(0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r6) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r8, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x98, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40018c0}, 0x24040800) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x62e994250c312d95) 00:17:18 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r6) r7 = syz_io_uring_complete(0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r6) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r8, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x98, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40018c0}, 0x24040800) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x62e994250c312d95) 00:17:18 executing program 3: openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) 00:17:18 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r6) r7 = syz_io_uring_complete(0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r6) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r8, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x98, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40018c0}, 0x24040800) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x62e994250c312d95) 00:17:18 executing program 3: openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) 00:17:18 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r6) r7 = syz_io_uring_complete(0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r6) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r8, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x98, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40018c0}, 0x24040800) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x62e994250c312d95) 00:17:18 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 3: openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) 00:17:18 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r6) r7 = syz_io_uring_complete(0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r6) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r8, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x98, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40018c0}, 0x24040800) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x62e994250c312d95) 00:17:18 executing program 3: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 00:17:18 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r5) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r7, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x98, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40018c0}, 0x24040800) 00:17:18 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 3: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 00:17:18 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r5) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r7, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x98, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40018c0}, 0x24040800) 00:17:18 executing program 4: process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r4) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r6, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x98, r6, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 00:17:18 executing program 3: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x0) 00:17:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r4) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r6, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x98, r6, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 00:17:18 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x8, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:18 executing program 4: process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r4) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r6, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) 00:17:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r4) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, r6, 0x30, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x18000) 00:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r4) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:17:18 executing program 4: process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) futex_waitv(&(0x7f00000013c0)=[{0x3, &(0x7f0000000000)=0x1, 0x82}, {0x0, &(0x7f0000000040)=0x2, 0x82}, {0x10000, &(0x7f0000000080)=0x3, 0x82}, {0x4, &(0x7f00000000c0)=0x5f4b905f, 0x4}, {0x7fffffff, &(0x7f0000000100)=0x400, 0x82}, {0x1, &(0x7f0000000140)=0x5c, 0x2}, {0x1, &(0x7f0000000180)=0xd8e1, 0x2}, {0x1, &(0x7f00000001c0)=0x5}, {0x6, &(0x7f0000000200)=0x4, 0x82}, {0x6, &(0x7f0000000240)=0x6, 0x2}, {0x2364, &(0x7f0000000280), 0x82}, {0xbc6b, &(0x7f00000002c0)=0x3, 0x82}, {0xfffffffffffffff8, &(0x7f0000000300)=0x4c, 0x82}, {0x9, &(0x7f0000000340)=0x4}, {0x400, &(0x7f0000000380), 0x2}, {0x7, &(0x7f00000003c0)=0x8000000000000001, 0x82}, {0x300000000000000, &(0x7f0000000400)=0x5, 0x2}, {0x91, &(0x7f0000000440)=0x7fff, 0x82}, {0xffffffffffffffff, &(0x7f0000000480)=0x7, 0x2}, {0xfffffffffffffff7, &(0x7f00000004c0)=0x1f}, {0x6, &(0x7f0000000500)=0x3, 0x5e8c2d8c74babf0e}, {0xa5, &(0x7f0000000540)=0x3e94, 0x80}, {0x7f, &(0x7f0000000580)=0x20, 0x82}, {0x80000000, &(0x7f00000005c0)=0x100000001, 0x82}, {0x9, &(0x7f0000000600)=0x8, 0x2}, {0x6, &(0x7f0000000640)=0x8000000000000001, 0x80}, {0x3, &(0x7f0000000680)=0x41fc, 0x82}, {0x1, &(0x7f00000006c0)=0x8, 0x82}, {0x6, &(0x7f0000000700)=0x7, 0x82}, {0xd, &(0x7f0000000740), 0x82}, {0x4, &(0x7f0000000780)=0x2, 0x2}, {0x2, &(0x7f00000007c0)=0x1, 0x2}, {0x3a5, &(0x7f0000000800)=0x8000, 0x82}, {0x8, &(0x7f0000000840)=0x100, 0x82}, {0xa319, &(0x7f0000000880)=0xe20e, 0x82}, {0x1000, &(0x7f00000008c0)=0x1000, 0x82}, {0x80000000, &(0x7f0000000900)=0xffffffffffffffff, 0x2}, {0x401, &(0x7f0000000940)=0x5, 0x82}, {0x8, &(0x7f0000000980)=0x5e24, 0x82}, {0x9, &(0x7f00000009c0)=0xfffffffffffffff8, 0x2}, {0x1, &(0x7f0000000a00)=0x9, 0x82}, {0x80000000, &(0x7f0000000a40)=0x7400000000000, 0x2}, {0x80000001, &(0x7f0000000a80)=0x8, 0x2}, {0x2, &(0x7f0000000ac0)=0x100000000, 0x2}, {0x200, &(0x7f0000000b00)=0x8, 0x2}, {0x3, &(0x7f0000000b40)=0x2, 0x2}, {0xfffffffffffffff8, &(0x7f0000000b80)=0x3, 0x2}, {0xffffffffffffffff, &(0x7f0000000bc0)=0x86c, 0x2}, {0x80000001, &(0x7f0000000c00), 0x2}, {0x401, &(0x7f0000000c40)=0x9, 0x2}, {0x1, &(0x7f0000000c80)=0xf2, 0x2}, {0x8, &(0x7f0000000cc0)=0x200}, {0x3f, &(0x7f0000000d00)=0x2132, 0x82}, {0x7fffffff, &(0x7f0000000d40)=0x2, 0x2}, {0x7fff, &(0x7f0000000d80)=0x4, 0x2}, {0x3, &(0x7f0000000dc0)=0x1, 0x82}, {0x0, &(0x7f0000000e00)=0x1, 0x2}, {0x4, &(0x7f0000000e40)=0x40, 0x82}, {0x836, &(0x7f0000000e80)=0x3, 0x2}, {0x80000000, &(0x7f0000000ec0)=0x7, 0x82}, {0xb7d9, &(0x7f0000000f00)=0x6, 0x2}, {0x0, &(0x7f0000000f40)=0x4, 0x82}, {0x6, &(0x7f0000000f80)=0x2, 0x82}, {0x4, &(0x7f0000000fc0)=0x80, 0x2}, {0x100400000000, &(0x7f0000001000)=0x400, 0x2}, {0x5, &(0x7f0000001040)=0x40}, {0x5, &(0x7f0000001080)=0x2, 0x82}, {0x1, &(0x7f00000010c0)=0x1000, 0x2}, {0x0, &(0x7f0000001100)=0xff, 0x82}, {0xe7, &(0x7f0000001140)=0x4, 0x2}, {0x2, &(0x7f0000001180)=0x3, 0x80}, {0x6, &(0x7f00000011c0)=0x2, 0x82}, {0x8, &(0x7f0000001200)=0xe9, 0x82}, {0x0, &(0x7f0000001240)=0x100000000, 0x2}, {0x8, &(0x7f0000001280)=0x5, 0x82}, {0x80000001, &(0x7f00000012c0)=0x7, 0x2}, {0x74, &(0x7f0000001300)=0x7, 0x80}, {0x57, &(0x7f0000001340)=0x3775, 0x82}, {0x7, &(0x7f0000001380)=0x6, 0x82}], 0x4f, 0x0, &(0x7f0000001b40)={0x0, 0x3938700}, 0x1) 00:17:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r4) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:17:18 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180), &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r4) syz_io_uring_complete(0x0) 00:17:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) futex_waitv(&(0x7f00000013c0)=[{0x3, &(0x7f0000000000)=0x1, 0x82}, {0x0, &(0x7f0000000040)=0x2, 0x82}, {0x10000, &(0x7f0000000080)=0x3, 0x82}, {0x4, &(0x7f00000000c0)=0x5f4b905f, 0x4}, {0x7fffffff, &(0x7f0000000100)=0x400, 0x82}, {0x1, &(0x7f0000000140)=0x5c, 0x2}, {0x1, &(0x7f0000000180)=0xd8e1, 0x2}, {0x1, &(0x7f00000001c0)=0x5}, {0x6, &(0x7f0000000200)=0x4, 0x82}, {0x6, &(0x7f0000000240)=0x6, 0x2}, {0x2364, &(0x7f0000000280), 0x82}, {0xbc6b, &(0x7f00000002c0)=0x3, 0x82}, {0xfffffffffffffff8, &(0x7f0000000300)=0x4c, 0x82}, {0x9, &(0x7f0000000340)=0x4}, {0x400, &(0x7f0000000380), 0x2}, {0x7, &(0x7f00000003c0)=0x8000000000000001, 0x82}, {0x300000000000000, &(0x7f0000000400)=0x5, 0x2}, {0x91, &(0x7f0000000440)=0x7fff, 0x82}, {0xffffffffffffffff, &(0x7f0000000480)=0x7, 0x2}, {0xfffffffffffffff7, &(0x7f00000004c0)=0x1f}, {0x6, &(0x7f0000000500)=0x3, 0x5e8c2d8c74babf0e}, {0xa5, &(0x7f0000000540)=0x3e94, 0x80}, {0x7f, &(0x7f0000000580)=0x20, 0x82}, {0x80000000, &(0x7f00000005c0)=0x100000001, 0x82}, {0x9, &(0x7f0000000600)=0x8, 0x2}, {0x6, &(0x7f0000000640)=0x8000000000000001, 0x80}, {0x3, &(0x7f0000000680)=0x41fc, 0x82}, {0x1, &(0x7f00000006c0)=0x8, 0x82}, {0x6, &(0x7f0000000700)=0x7, 0x82}, {0xd, &(0x7f0000000740), 0x82}, {0x4, &(0x7f0000000780)=0x2, 0x2}, {0x2, &(0x7f00000007c0)=0x1, 0x2}, {0x3a5, &(0x7f0000000800)=0x8000, 0x82}, {0x8, &(0x7f0000000840)=0x100, 0x82}, {0xa319, &(0x7f0000000880)=0xe20e, 0x82}, {0x1000, &(0x7f00000008c0)=0x1000, 0x82}, {0x80000000, &(0x7f0000000900)=0xffffffffffffffff, 0x2}, {0x401, &(0x7f0000000940)=0x5, 0x82}, {0x8, &(0x7f0000000980)=0x5e24, 0x82}, {0x9, &(0x7f00000009c0)=0xfffffffffffffff8, 0x2}, {0x1, &(0x7f0000000a00)=0x9, 0x82}, {0x80000000, &(0x7f0000000a40)=0x7400000000000, 0x2}, {0x80000001, &(0x7f0000000a80)=0x8, 0x2}, {0x2, &(0x7f0000000ac0)=0x100000000, 0x2}, {0x200, &(0x7f0000000b00)=0x8, 0x2}, {0x3, &(0x7f0000000b40)=0x2, 0x2}, {0xfffffffffffffff8, &(0x7f0000000b80)=0x3, 0x2}, {0xffffffffffffffff, &(0x7f0000000bc0)=0x86c, 0x2}, {0x80000001, &(0x7f0000000c00), 0x2}, {0x401, &(0x7f0000000c40)=0x9, 0x2}, {0x1, &(0x7f0000000c80)=0xf2, 0x2}, {0x8, &(0x7f0000000cc0)=0x200}, {0x3f, &(0x7f0000000d00)=0x2132, 0x82}, {0x7fffffff, &(0x7f0000000d40)=0x2, 0x2}, {0x7fff, &(0x7f0000000d80)=0x4, 0x2}, {0x3, &(0x7f0000000dc0)=0x1, 0x82}, {0x0, &(0x7f0000000e00)=0x1, 0x2}, {0x4, &(0x7f0000000e40)=0x40, 0x82}, {0x836, &(0x7f0000000e80)=0x3, 0x2}, {0x80000000, &(0x7f0000000ec0)=0x7, 0x82}, {0xb7d9, &(0x7f0000000f00)=0x6, 0x2}, {0x0, &(0x7f0000000f40)=0x4, 0x82}, {0x6, &(0x7f0000000f80)=0x2, 0x82}, {0x4, &(0x7f0000000fc0)=0x80, 0x2}, {0x100400000000, &(0x7f0000001000)=0x400, 0x2}, {0x5, &(0x7f0000001040)=0x40}, {0x5, &(0x7f0000001080)=0x2, 0x82}, {0x1, &(0x7f00000010c0)=0x1000, 0x2}, {0x0, &(0x7f0000001100)=0xff, 0x82}, {0xe7, &(0x7f0000001140)=0x4, 0x2}, {0x2, &(0x7f0000001180)=0x3, 0x80}, {0x6, &(0x7f00000011c0)=0x2, 0x82}, {0x8, &(0x7f0000001200)=0xe9, 0x82}, {0x0, &(0x7f0000001240)=0x100000000, 0x2}, {0x8, &(0x7f0000001280)=0x5, 0x82}, {0x80000001, &(0x7f00000012c0)=0x7, 0x2}, {0x74, &(0x7f0000001300)=0x7, 0x80}, {0x57, &(0x7f0000001340)=0x3775, 0x82}, {0x7, &(0x7f0000001380)=0x6, 0x82}], 0x4f, 0x0, &(0x7f0000001b40)={0x0, 0x3938700}, 0x1) 00:17:18 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r4) syz_io_uring_complete(0x0) 00:17:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) futex_waitv(&(0x7f00000013c0)=[{0x3, &(0x7f0000000000)=0x1, 0x82}, {0x0, &(0x7f0000000040)=0x2, 0x82}, {0x10000, &(0x7f0000000080)=0x3, 0x82}, {0x4, &(0x7f00000000c0)=0x5f4b905f, 0x4}, {0x7fffffff, &(0x7f0000000100)=0x400, 0x82}, {0x1, &(0x7f0000000140)=0x5c, 0x2}, {0x1, &(0x7f0000000180)=0xd8e1, 0x2}, {0x1, &(0x7f00000001c0)=0x5}, {0x6, &(0x7f0000000200)=0x4, 0x82}, {0x6, &(0x7f0000000240)=0x6, 0x2}, {0x2364, &(0x7f0000000280), 0x82}, {0xbc6b, &(0x7f00000002c0)=0x3, 0x82}, {0xfffffffffffffff8, &(0x7f0000000300)=0x4c, 0x82}, {0x9, &(0x7f0000000340)=0x4}, {0x400, &(0x7f0000000380), 0x2}, {0x7, &(0x7f00000003c0)=0x8000000000000001, 0x82}, {0x300000000000000, &(0x7f0000000400)=0x5, 0x2}, {0x91, &(0x7f0000000440)=0x7fff, 0x82}, {0xffffffffffffffff, &(0x7f0000000480)=0x7, 0x2}, {0xfffffffffffffff7, &(0x7f00000004c0)=0x1f}, {0x6, &(0x7f0000000500)=0x3, 0x5e8c2d8c74babf0e}, {0xa5, &(0x7f0000000540)=0x3e94, 0x80}, {0x7f, &(0x7f0000000580)=0x20, 0x82}, {0x80000000, &(0x7f00000005c0)=0x100000001, 0x82}, {0x9, &(0x7f0000000600)=0x8, 0x2}, {0x6, &(0x7f0000000640)=0x8000000000000001, 0x80}, {0x3, &(0x7f0000000680)=0x41fc, 0x82}, {0x1, &(0x7f00000006c0)=0x8, 0x82}, {0x6, &(0x7f0000000700)=0x7, 0x82}, {0xd, &(0x7f0000000740), 0x82}, {0x4, &(0x7f0000000780)=0x2, 0x2}, {0x2, &(0x7f00000007c0)=0x1, 0x2}, {0x3a5, &(0x7f0000000800)=0x8000, 0x82}, {0x8, &(0x7f0000000840)=0x100, 0x82}, {0xa319, &(0x7f0000000880)=0xe20e, 0x82}, {0x1000, &(0x7f00000008c0)=0x1000, 0x82}, {0x80000000, &(0x7f0000000900)=0xffffffffffffffff, 0x2}, {0x401, &(0x7f0000000940)=0x5, 0x82}, {0x8, &(0x7f0000000980)=0x5e24, 0x82}, {0x9, &(0x7f00000009c0)=0xfffffffffffffff8, 0x2}, {0x1, &(0x7f0000000a00)=0x9, 0x82}, {0x80000000, &(0x7f0000000a40)=0x7400000000000, 0x2}, {0x80000001, &(0x7f0000000a80)=0x8, 0x2}, {0x2, &(0x7f0000000ac0)=0x100000000, 0x2}, {0x200, &(0x7f0000000b00)=0x8, 0x2}, {0x3, &(0x7f0000000b40)=0x2, 0x2}, {0xfffffffffffffff8, &(0x7f0000000b80)=0x3, 0x2}, {0xffffffffffffffff, &(0x7f0000000bc0)=0x86c, 0x2}, {0x80000001, &(0x7f0000000c00), 0x2}, {0x401, &(0x7f0000000c40)=0x9, 0x2}, {0x1, &(0x7f0000000c80)=0xf2, 0x2}, {0x8, &(0x7f0000000cc0)=0x200}, {0x3f, &(0x7f0000000d00)=0x2132, 0x82}, {0x7fffffff, &(0x7f0000000d40)=0x2, 0x2}, {0x7fff, &(0x7f0000000d80)=0x4, 0x2}, {0x3, &(0x7f0000000dc0)=0x1, 0x82}, {0x0, &(0x7f0000000e00)=0x1, 0x2}, {0x4, &(0x7f0000000e40)=0x40, 0x82}, {0x836, &(0x7f0000000e80)=0x3, 0x2}, {0x80000000, &(0x7f0000000ec0)=0x7, 0x82}, {0xb7d9, &(0x7f0000000f00)=0x6, 0x2}, {0x0, &(0x7f0000000f40)=0x4, 0x82}, {0x6, &(0x7f0000000f80)=0x2, 0x82}, {0x4, &(0x7f0000000fc0)=0x80, 0x2}, {0x100400000000, &(0x7f0000001000)=0x400, 0x2}, {0x5, &(0x7f0000001040)=0x40}, {0x5, &(0x7f0000001080)=0x2, 0x82}, {0x1, &(0x7f00000010c0)=0x1000, 0x2}, {0x0, &(0x7f0000001100)=0xff, 0x82}, {0xe7, &(0x7f0000001140)=0x4, 0x2}, {0x2, &(0x7f0000001180)=0x3, 0x80}, {0x6, &(0x7f00000011c0)=0x2, 0x82}, {0x8, &(0x7f0000001200)=0xe9, 0x82}, {0x0, &(0x7f0000001240)=0x100000000, 0x2}, {0x8, &(0x7f0000001280)=0x5, 0x82}, {0x80000001, &(0x7f00000012c0)=0x7, 0x2}, {0x74, &(0x7f0000001300)=0x7, 0x80}, {0x57, &(0x7f0000001340)=0x3775, 0x82}, {0x7, &(0x7f0000001380)=0x6, 0x82}], 0x4f, 0x0, &(0x7f0000001b40)={0x0, 0x3938700}, 0x1) 00:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r4) 00:17:18 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)="7ffabb8380f498fab075eaebb233979d543e3cde725294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f77c93257eb1d0ef50d69616f6dc68512bc684f29c0bf7a27048ea20b72186213") process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sendmsg$NLBL_CALIPSO_C_ADD(r0, 0xfffffffffffffffe, 0x0) 00:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) 00:17:18 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}], 0x4, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r4) 00:17:18 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 00:17:18 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)) 00:17:18 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) 00:17:18 executing program 3: prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 00:17:18 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}], 0x3, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) 00:17:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)) 00:17:19 executing program 3: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 00:17:19 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) 00:17:19 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 3: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 00:17:19 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) 00:17:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) 00:17:19 executing program 3: prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 00:17:19 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}], 0x4, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}], 0x6, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) 00:17:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) 00:17:19 executing program 3: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 00:17:19 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) 00:17:19 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) 00:17:19 executing program 3: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 00:17:19 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}], 0x3, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 00:17:19 executing program 3: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 00:17:19 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {0x0}], 0x3, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) 00:17:19 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 00:17:19 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000000000003001bce542cdadc90fe64410526878c08a25d6a286732334943bbfb8952ef1aff995a6ee2cd59f6a5c3aaf1f7350189b711fa4853e3a4239ba6ef6c1750da171550237dab95d68eaf75c8156a2d99353d00d3946d4b0d8aeb70d33a2e13cd77c5166ed733c61f9c080b3f02cc852498a6bdf8549374e990386d6e7e42ef3337deca85bbbd7947d6ff8081c9347e27b57b09e8f5b6a678a617b7ba92fa479b96a939e330af4aeb5d927ea68dd9bec63322547ff2b35ed504ffc36499b3ee5501c57b4f93e120", @ANYRES32=0x0, @ANYBLOB="08003100fbffffff"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0x9a83, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8e4e1172439fc232, 0x10, 0x237, 0x3ff}}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r4) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:17:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) 00:17:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:17:19 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {0x0}], 0x3, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 3: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_clone(0x802000, &(0x7f0000001100), 0x0, &(0x7f0000001140), &(0x7f0000001180), 0x0) process_vm_writev(r0, &(0x7f0000002440)=[{&(0x7f0000000000)=""/158, 0x9e}, {&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f00000001c0)=""/57, 0x39}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x8, &(0x7f0000003680)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/232, 0xe8}, {&(0x7f00000035c0)=""/157, 0x9d}], 0x3, 0x0) 00:17:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 00:17:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 00:17:19 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {0x0}], 0x3, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:19 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {0x0}], 0x3, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 00:17:19 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:17:19 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {0x0}], 0x3, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}, {&(0x7f0000000480)=""/216, 0xd8}], 0x4, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 2: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r7 = syz_clone(0x802000, &(0x7f0000000380)="13231d201f9e0116b071f639f3ed0513c20d009942f29a2a82e1b4808e3d9f362146054fc735533d43802d2ea7aa56d9b1e28a797eedf7c9a863c64a7c84c8ebbfe6738ca9e9c95279bd4f11b5e76293950781751cc1a69830de54fcdf183643bfb4765f257bde6d96bebb3d06b04f1378d9f601a8d7044f5c271b151c1c0386cb8b2573ac45b5252d9717d0a96b1162040073878391ad4d", 0x98, &(0x7f0000001140), &(0x7f0000000340), &(0x7f0000000440)="7ffabb8380f498fab075eaebb233979d543e3cde705294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e479d49f7d43784b124bebc72ca8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f57eb1d0ef50d69616f6dc68512bc684f09c0bf7a27048ea20b72186213") sendmsg$nl_route(r1, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000001400)={{0x8, 0x3, 0x5, 0x9, '\x00', 0x6e}, 0x4, 0x0, 0x3, r7, 0x1, 0xb73f, 'syz0\x00', &(0x7f00000013c0)=['IPVS\x00'], 0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, r7, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:19 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {0x0}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 00:17:19 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {&(0x7f00000003c0)=""/149, 0x95}], 0x3, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {0x0}], 0x3, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 2: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:19 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {0x0}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:19 executing program 2: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r7 = syz_clone(0x802000, &(0x7f0000000380)="13231d201f9e0116b071f639f3ed0513c20d009942f29a2a82e1b4808e3d9f362146054fc735533d43802d2ea7aa56d9b1e28a797eedf7c9a863c64a7c84c8ebbfe6738ca9e9c95279bd4f11b5e76293950781751cc1a69830de54fcdf183643bfb4765f257bde6d96bebb3d06b04f1378d9f601a8d7044f5c271b151c1c0386cb8b2573ac45b5252d9717d0a96b1162040073878391ad4d", 0x98, &(0x7f0000001140), &(0x7f0000000340), &(0x7f0000000440)="7ffabb8380f498fab075eaebb233979d543e3cde705294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e479d49f7d43784b124bebc72ca8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f57eb1d0ef50d69616f6dc68512bc684f09c0bf7a27048ea20b72186213") sendmsg$nl_route(r1, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000001400)={{0x8, 0x3, 0x5, 0x9, '\x00', 0x6e}, 0x4, 0x0, 0x3, r7, 0x1, 0xb73f, 'syz0\x00', &(0x7f00000013c0)=['IPVS\x00'], 0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, r7, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:19 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) 00:17:19 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {0x0}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:19 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:19 executing program 0: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)=0x10000) 00:17:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r7 = syz_clone(0x802000, &(0x7f0000000380)="13231d201f9e0116b071f639f3ed0513c20d009942f29a2a82e1b4808e3d9f362146054fc735533d43802d2ea7aa56d9b1e28a797eedf7c9a863c64a7c84c8ebbfe6738ca9e9c95279bd4f11b5e76293950781751cc1a69830de54fcdf183643bfb4765f257bde6d96bebb3d06b04f1378d9f601a8d7044f5c271b151c1c0386cb8b2573ac45b5252d9717d0a96b1162040073878391ad4d", 0x98, &(0x7f0000001140), &(0x7f0000000340), &(0x7f0000000440)="7ffabb8380f498fab075eaebb233979d543e3cde705294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e479d49f7d43784b124bebc72ca8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f57eb1d0ef50d69616f6dc68512bc684f09c0bf7a27048ea20b72186213") sendmsg$nl_route(r1, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000001400)={{0x8, 0x3, 0x5, 0x9, '\x00', 0x6e}, 0x4, 0x0, 0x3, r7, 0x1, 0xb73f, 'syz0\x00', &(0x7f00000013c0)=['IPVS\x00'], 0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, r7, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:20 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:20 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/149, 0x95}], 0x1, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {0x0}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 0: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)=0x10000) 00:17:20 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:20 executing program 0: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)=0x10000) 00:17:20 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/149, 0x95}], 0x1, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {0x0}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r7 = syz_clone(0x802000, &(0x7f0000000380)="13231d201f9e0116b071f639f3ed0513c20d009942f29a2a82e1b4808e3d9f362146054fc735533d43802d2ea7aa56d9b1e28a797eedf7c9a863c64a7c84c8ebbfe6738ca9e9c95279bd4f11b5e76293950781751cc1a69830de54fcdf183643bfb4765f257bde6d96bebb3d06b04f1378d9f601a8d7044f5c271b151c1c0386cb8b2573ac45b5252d9717d0a96b1162040073878391ad4d", 0x98, &(0x7f0000001140), &(0x7f0000000340), &(0x7f0000000440)="7ffabb8380f498fab075eaebb233979d543e3cde705294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e479d49f7d43784b124bebc72ca8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f57eb1d0ef50d69616f6dc68512bc684f09c0bf7a27048ea20b72186213") sendmsg$nl_route(r1, &(0x7f0000001380)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)=@setlink={0x70, 0x13, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x100, 0x42002}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8000}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x80}, @IFLA_MASTER={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, r7, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:20 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) 00:17:20 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {0x0}], 0x3, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:20 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {0x0}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/149, 0x95}], 0x1, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) 00:17:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) r7 = syz_clone(0x802000, &(0x7f0000000380)="13231d201f9e0116b071f639f3ed0513c20d009942f29a2a82e1b4808e3d9f362146054fc735533d43802d2ea7aa56d9b1e28a797eedf7c9a863c64a7c84c8ebbfe6738ca9e9c95279bd4f11b5e76293950781751cc1a69830de54fcdf183643bfb4765f257bde6d96bebb3d06b04f1378d9f601a8d7044f5c271b151c1c0386cb8b2573ac45b5252d9717d0a96b1162040073878391ad4d", 0x98, &(0x7f0000001140), &(0x7f0000000340), &(0x7f0000000440)="7ffabb8380f498fab075eaebb233979d543e3cde705294e67ef34548578f39c804acb5c7f9a356952b6b7bb58d85aecfcb0e16981ea707b33ab10effb9cfb8de2d7457b18565766242a88c74a5d42be0a4ef8a364edbe56bafea37b627256856c12ed277683933fe1dd7ffe2e9cb4a88ffef755921979f8e479d49f7d43784b124bebc72ca8ef92da3771ae83a77bed3fb3a5eea4806aca63caba0b601d6fe1cfc4f7e4d926a4de8a21d88d71f39230a32ff2729c086a9eae4cfc675faaea9245a129f57eb1d0ef50d69616f6dc68512bc684f09c0bf7a27048ea20b72186213") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, r7, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:20 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {0x0}], 0x3, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000000)=""/42) 00:17:20 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) 00:17:20 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/149, 0x95}], 0x1, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:20 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/31, 0x1f}, {0x0}], 0x3, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) 00:17:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) 00:17:20 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) 00:17:20 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)=0x10000) 00:17:20 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/149, 0x95}], 0x1, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) 00:17:20 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)=0x10000) 00:17:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x803}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:20 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/149, 0x95}], 0x1, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:20 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)=0x10000) 00:17:20 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {0x0}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) 00:17:20 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, 0x0, 0x0, 0x0) 00:17:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 00:17:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) 00:17:20 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {0x0}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, 0x0, 0x0, 0x0) 00:17:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 00:17:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) 00:17:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x458267dff0a75e1f}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x8c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x4}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2b}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9dd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44041}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:20 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {0x0}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 00:17:20 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 2: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) 00:17:20 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, 0x0, 0x0, 0x0) 00:17:20 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/149, 0x95}], 0x1, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:20 executing program 2: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) 00:17:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)) 00:17:20 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}], 0x5, 0x0) 00:17:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800), 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:20 executing program 2: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) 00:17:20 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) 00:17:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)) 00:17:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:20 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/149, 0x95}], 0x1, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:20 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, 0x0, 0x0, 0x0) 00:17:20 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x4, 0x0) 00:17:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)) 00:17:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) 00:17:21 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/149, 0x95}], 0x1, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:21 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:21 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, 0x0, 0x0, 0x0) 00:17:21 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) 00:17:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x37}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x40}}, 0x20000011) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x3, 0x0) 00:17:21 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:21 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) 00:17:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) socketpair(0x26, 0x80000, 0x200, &(0x7f0000000580)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) 00:17:21 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, 0x0, 0x0, 0x0) 00:17:21 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) 00:17:21 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)) 00:17:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) 00:17:21 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}], 0x1, 0x0) 00:17:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)) 00:17:21 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}, {&(0x7f00000048c0)=""/99, 0x63}], 0x6, 0x0) 00:17:21 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}], 0x5, 0x0) 00:17:21 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, 0x0, 0x0, 0x0) 00:17:21 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}], 0x1, 0x0) 00:17:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)) 00:17:21 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x4, 0x0) 00:17:21 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, 0x0, 0x0, 0x0) 00:17:21 executing program 0: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)) 00:17:21 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}], 0x5, 0x0) 00:17:21 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}], 0x1, 0x0) 00:17:21 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x3, 0x0) 00:17:21 executing program 0: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)) 00:17:21 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, 0x0, 0x0, 0x0) 00:17:21 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {0x0}], 0x2, 0x0) 00:17:21 executing program 0: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)) 00:17:21 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) 00:17:21 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) 00:17:21 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, 0x0, 0x0, 0x0) 00:17:21 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)) 00:17:21 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {0x0}], 0x2, 0x0) 00:17:21 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/247, 0xf7}], 0x5, 0x0) 00:17:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 00:17:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {0x0}], 0x2, 0x0) 00:17:21 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}], 0x1, 0x0) 00:17:21 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)) 00:17:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 00:17:21 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x4, 0x0) 00:17:21 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)) 00:17:21 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 00:17:21 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}], 0x1, 0x0) 00:17:21 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x3, 0x0) 00:17:21 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)) 00:17:21 executing program 3: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x7, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:21 executing program 2: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 00:17:21 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}], 0x1, 0x0) 00:17:21 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:21 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)) 00:17:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:21 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) 00:17:21 executing program 2: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 00:17:21 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:21 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {0x0}], 0x2, 0x0) 00:17:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:21 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000180)) 00:17:22 executing program 2: ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 00:17:22 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}], 0x1, 0x0) 00:17:22 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 00:17:22 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:22 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {0x0}], 0x2, 0x0) 00:17:22 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{0x0}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) 00:17:22 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 00:17:22 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}], 0x1, 0x0) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 00:17:22 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {0x0}], 0x2, 0x0) 00:17:22 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{0x0}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) 00:17:22 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) 00:17:22 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}], 0x1, 0x0) 00:17:22 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{0x0}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) 00:17:22 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:22 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x0, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:22 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {0x0}], 0x2, 0x0) 00:17:22 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x0, 0x0, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 00:17:22 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:22 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 2: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) 00:17:22 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {0x0}], 0x2, 0x0) 00:17:22 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:22 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x20801) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x10000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/42) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 00:17:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:22 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) 00:17:22 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000016c0)=""/230, 0xe6}, {0x0}], 0x2, 0x0) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000000)=""/148) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0xfffffffffffffffe, 0x4008004) 00:17:22 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{0x0}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) 00:17:22 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) 00:17:22 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000000)=""/148) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0xfffffffffffffffe, 0x4008004) 00:17:22 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{0x0}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) 00:17:22 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000000)=""/148) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0xfffffffffffffffe, 0x4008004) 00:17:22 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:22 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:22 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{0x0}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) 00:17:22 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1, 0x0) 00:17:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000000)=""/148) 00:17:22 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 00:17:22 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:22 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@any, 0x7f, 0x5, 0x1f, "4807ce", 0x800, 0x3}, {@none, 0x1, 0x4, 0x5, "1715e8", 0x5, 0x4}, {@any, 0xf9, 0x6, 0x0, "3080c1", 0xfffb, 0x1f}]}}}, 0x4f) 00:17:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:17:22 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40005040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x231c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}}, 0x0) 00:17:22 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{0x0}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) [ 1042.945369][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:22 executing program 0: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:22 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@any, 0x7f, 0x5, 0x1f, "4807ce", 0x800, 0x3}, {@none, 0x1, 0x4, 0x5, "1715e8", 0x5, 0x4}, {@any, 0xf9, 0x6, 0x0, "3080c1", 0xfffb, 0x1f}]}}}, 0x4f) 00:17:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:17:22 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40005040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x231c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}}, 0x0) 00:17:22 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) [ 1043.005080][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) 00:17:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x4c}, {0x5, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@any, 0x7f, 0x5, 0x1f, "4807ce", 0x800, 0x3}, {@none, 0x1, 0x4, 0x5, "1715e8", 0x5, 0x4}, {@any, 0xf9, 0x6, 0x0, "3080c1", 0xfffb, 0x1f}]}}}, 0x4f) 00:17:23 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40005040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x231c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}}, 0x0) 00:17:23 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) 00:17:23 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{0x0}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) 00:17:23 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) 00:17:23 executing program 1: [ 1043.091760][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:23 executing program 1: 00:17:23 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) 00:17:23 executing program 5: syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) 00:17:23 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) [ 1043.155170][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:23 executing program 1: 00:17:23 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f00000003c0)=""/149, 0x95}], 0x2, &(0x7f0000004940)=[{0x0}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, 0x0) 00:17:23 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) 00:17:23 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:23 executing program 1: syz_emit_vhci(0x0, 0x0) [ 1043.208884][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) 00:17:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, 0x0) 00:17:23 executing program 1: syz_emit_vhci(0x0, 0x0) 00:17:23 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) 00:17:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) [ 1043.290749][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:23 executing program 1: syz_emit_vhci(0x0, 0x0) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x0, 0x5, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:23 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40005040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x231c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x64}}, 0x0) 00:17:23 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:17:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x5, 0x100], 0x401}, 0x10) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x40, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@any, 0x7f, 0x5, 0x1f, "4807ce", 0x800, 0x3}, {@none, 0x1, 0x4, 0x5, "1715e8", 0x5, 0x4}]}}}, 0x40) 00:17:23 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x6, 0xc8, 0x1}}}, 0x7) [ 1043.370389][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:23 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) [ 1043.389808][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) [ 1043.414839][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:23 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x6, 0xc8, 0x1}}}, 0x7) 00:17:23 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xffff) 00:17:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00f0a711a20000", @ANYRES16=r3, @ANYBLOB="000229bd70fddb08000200000096ff020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0xfffffffffffffffe, 0x0) 00:17:23 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xffff) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x9}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@any, 0x7f, 0x5, 0x1f, "4807ce", 0x800, 0x3}]}}}, 0x31) 00:17:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00f0a711a20000", @ANYRES16=r3, @ANYBLOB="000229bd70fddb08000200000096ff020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0xfffffffffffffffe, 0x0) 00:17:23 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0xffff) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@any, 0x7f, 0x5, 0x1f, "4807ce", 0x800, 0x3}]}}}, 0x31) 00:17:23 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x6, 0xc8, 0x1}}}, 0x7) 00:17:23 executing program 3: syz_io_uring_complete(0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) 00:17:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00f0a711a20000", @ANYRES16=r3, @ANYBLOB="000229bd70fddb08000200000096ff020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0xfffffffffffffffe, 0x0) 00:17:23 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) r4 = syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000540)={{0x3, 0x6, 0x8000, 0xffff8001, '\x00', 0x2}, 0x4, 0x400, 0xffffffff, r4, 0x1, 0x2, 'syz1\x00', &(0x7f00000003c0)=['^-+&-)\x00'], 0x7}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000680)=""/4096) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000040)) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:23 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) [ 1043.585056][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@any, 0x7f, 0x5, 0x1f, "4807ce", 0x800, 0x3}]}}}, 0x31) 00:17:23 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) 00:17:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00f0a711a20000", @ANYRES16=r3, @ANYBLOB="000229bd70fddb08000200000096ff020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r1, 0xfffffffffffffffe, 0x0) [ 1043.628838][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:23 executing program 3: syz_emit_vhci(0x0, 0x0) 00:17:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@any, 0x7f, 0x5, 0x1f, "4807ce", 0x800, 0x3}, {@none, 0x0, 0x4, 0x5, "1715e8", 0x5, 0x4}]}}}, 0x40) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:23 executing program 3: syz_emit_vhci(0x0, 0x0) 00:17:23 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) 00:17:23 executing program 3: syz_emit_vhci(0x0, 0x0) 00:17:23 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) r4 = syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000540)={{0x3, 0x6, 0x8000, 0xffff8001, '\x00', 0x2}, 0x4, 0x400, 0xffffffff, r4, 0x1, 0x2, 'syz1\x00', &(0x7f00000003c0)=['^-+&-)\x00'], 0x7}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000680)=""/4096) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000040)) 00:17:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@any, 0x7f, 0x5, 0x1f, "4807ce", 0x800, 0x3}, {@none, 0x0, 0x0, 0x5, "1715e8", 0x5, 0x4}]}}}, 0x40) 00:17:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00f0a711a20000", @ANYRES16=r3, @ANYBLOB="000229bd70fddb08000200000096ff020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 00:17:23 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x9}, 0x0, 0x10, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:23 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x0, @any, "12fa9ed3fb0f8f54509dd6dd40494732e1c6c60ec9eb2b1190687591d90bd1814b9902536642dec96ea08b49fb72f1c8e10dd33996d38cd78fc772cdf4ff2c79b9c1ff144b2a82946e2b5432ca26dcad833ea1fd9ba1831f65aeeb2c084cde9e1818a94ca22a111f400e73f2f65b2645936ef0953616482e4179b2778899ce81794003fe895b7743f5e58abcb819db2d03abeac399b2d8753e944e4e205e293db1a54b137ea0eadbac40dada66bcba7f3921bdbe8879c50313e66e2921f8e10a0ea83ae2fff0971bf54f7caac0831fb5fe0070d9fbe2128180f0b59a83180da2e32d34fdcdd694a7b8c836eea21e8441c062c3d9e5bcb75d"}}}, 0x102) [ 1043.776065][ T5944] Bluetooth: hci5: ACL packet for unknown connection handle 0 00:17:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@any, 0x7f, 0x5, 0x1f, "4807ce", 0x800, 0x3}, {@none, 0x0, 0x0, 0x0, "1715e8", 0x5, 0x4}]}}}, 0x40) 00:17:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x9}, 0x0, 0x0, 0x8, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:23 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r3) r4 = syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000540)={{0x3, 0x6, 0x8000, 0xffff8001, '\x00', 0x2}, 0x4, 0x400, 0xffffffff, r4, 0x1, 0x2, 'syz1\x00', &(0x7f00000003c0)=['^-+&-)\x00'], 0x7}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000680)=""/4096) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000040)) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x9}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) 00:17:23 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x6, 0xc8, 0x1}}}, 0x7) 00:17:23 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) 00:17:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@any, 0x7f, 0x5, 0x1f, "4807ce", 0x800, 0x3}, {@none, 0x0, 0x0, 0x0, "1715e8", 0x0, 0x4}]}}}, 0x40) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x9}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 'syz0\x00', &(0x7f0000000000)=['\x00', '\x00', '\x14]\x00', '$/\x00', '}:\x00', '\x83\\\x00', '/dev/snd/controlC#\x00', '%*}\x00'], 0x25}) [ 1043.871422][ T5944] Bluetooth: hci5: ACL packet for unknown connection handle 0 00:17:23 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) 00:17:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:17:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 1043.919968][ T5944] Bluetooth: hci5: ACL packet for unknown connection handle 0 00:17:23 executing program 4: syz_emit_vhci(0x0, 0x0) 00:17:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x3d}, {0x4, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@any, 0x7f, 0x5, 0x1f, "4807ce", 0x800, 0x3}, {@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x40) 00:17:23 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) [ 1043.987712][ T5944] [ 1043.988205][ T5944] ===================================== [ 1043.989469][ T5944] WARNING: bad unlock balance detected! [ 1043.990639][ T5944] 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0 Not tainted [ 1043.991946][ T5944] ------------------------------------- [ 1043.993063][ T5944] kworker/u5:2/5944 is trying to release lock (&conn->chan_lock) at: [ 1043.994736][ T5944] [] l2cap_disconnect_rsp+0x210/0x30c [ 1043.996097][ T5944] but there are no more locks to release! [ 1043.997297][ T5944] 00:17:23 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) r3 = syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000540)={{0x3, 0x6, 0x8000, 0xffff8001, '\x00', 0x2}, 0x4, 0x400, 0xffffffff, r3, 0x1, 0x2, 'syz1\x00', &(0x7f00000003c0)=['^-+&-)\x00'], 0x7}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000680)=""/4096) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 00:17:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00f0a711a20000", @ANYRES16=r3, @ANYBLOB="000229bd70fddb08000200000096ff020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 00:17:23 executing program 4: syz_emit_vhci(0x0, 0x0) 00:17:23 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@any, 0x6, 0x5e, 0x8, "491c72", 0x3, 0x3}, {@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x31) 00:17:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:17:23 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) [ 1043.997297][ T5944] other info that might help us debug this: [ 1043.999017][ T5944] 2 locks held by kworker/u5:2/5944: [ 1044.000129][ T5944] #0: ffff0000db3a8138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_one_work+0x664/0x12d4 [ 1044.002423][ T5944] #1: ffff80001e717c20 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x12d4 [ 1044.004980][ T5944] [ 1044.004980][ T5944] stack backtrace: [ 1044.006148][ T5944] CPU: 1 PID: 5944 Comm: kworker/u5:2 Not tainted 6.3.0-rc7-syzkaller-g14f8db1c0f9a #0 [ 1044.008150][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 1044.010332][ T5944] Workqueue: hci5 hci_rx_work [ 1044.011301][ T5944] Call trace: [ 1044.011989][ T5944] dump_backtrace+0x1b8/0x1e4 [ 1044.012962][ T5944] show_stack+0x2c/0x44 [ 1044.013836][ T5944] dump_stack_lvl+0xd0/0x124 [ 1044.014799][ T5944] dump_stack+0x1c/0x28 [ 1044.015680][ T5944] print_unlock_imbalance_bug+0x250/0x2a4 [ 1044.016855][ T5944] lock_release+0x4ac/0x9ac [ 1044.017883][ T5944] __mutex_unlock_slowpath+0xe0/0x6b4 [ 1044.019031][ T5944] mutex_unlock+0x18/0x24 [ 1044.019916][ T5944] l2cap_disconnect_rsp+0x210/0x30c [ 1044.021033][ T5944] l2cap_recv_frame+0x18b4/0x6a14 [ 1044.022162][ T5944] l2cap_recv_acldata+0x4f4/0x163c [ 1044.023249][ T5944] hci_rx_work+0x2cc/0x8b8 [ 1044.024166][ T5944] process_one_work+0x788/0x12d4 [ 1044.025204][ T5944] worker_thread+0x8e0/0xfe8 [ 1044.026220][ T5944] kthread+0x250/0x2d8 [ 1044.027152][ T5944] ret_from_fork+0x10/0x20 00:17:24 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4, 0x1}}}}, 0x11) 00:17:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) 00:17:24 executing program 4: syz_emit_vhci(0x0, 0x0) 00:17:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x6, 0x7b, "9af80f", 0x80d4, 0x4}, {@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x22) 00:17:24 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0xf8c4, 0x1}}}}, 0x11) [ 1044.081535][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:24 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) r3 = syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000540)={{0x3, 0x6, 0x8000, 0xffff8001, '\x00', 0x2}, 0x4, 0x400, 0xffffffff, r3, 0x1, 0x2, 'syz1\x00', &(0x7f00000003c0)=['^-+&-)\x00'], 0x7}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000680)=""/4096) 00:17:24 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x0, 0xc8, 0x1}}}, 0x7) 00:17:24 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x13) 00:17:24 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0xf8c4, 0x1}}}}, 0x11) 00:17:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:17:24 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x0, 0xc8, 0x1}}}, 0x7) 00:17:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r2 = syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000540)={{0x3, 0x6, 0x8000, 0xffff8001, '\x00', 0x2}, 0x4, 0x400, 0xffffffff, r2, 0x1, 0x2, 'syz1\x00', &(0x7f00000003c0)=['^-+&-)\x00'], 0x7}) [ 1044.132189][ T5944] Bluetooth: Unexpected continuation frame (len 12) 00:17:24 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x13) 00:17:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:17:24 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x0, 0xc8, 0x1}}}, 0x7) 00:17:24 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0xf8c4, 0x1}}}}, 0x11) [ 1044.163267][ T5962] Bluetooth: Unexpected continuation frame (len 12) 00:17:24 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x13) 00:17:24 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x0, 0x1}}}}, 0x11) 00:17:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:17:24 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) [ 1044.193095][ T2119] Bluetooth: Unexpected continuation frame (len 12) 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x7b, "9af80f", 0x80d4, 0x4}, {@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x22) 00:17:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x6, 0x0, 0x1}}}, 0x7) 00:17:24 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x0, 0x1}}}}, 0x11) 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "9af80f", 0x80d4, 0x4}, {@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x22) 00:17:24 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) 00:17:24 executing program 4: syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x6}}}, 0x7) [ 1044.239932][ T2119] Bluetooth: Unexpected continuation frame (len 12) 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "9af80f", 0x0, 0x4}, {@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x22) 00:17:24 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0x0, 0x1}}}}, 0x11) 00:17:24 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1044.259973][ T2119] Bluetooth: Unexpected continuation frame (len 12) 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "9af80f"}, {@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x22) 00:17:24 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) 00:17:24 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4}}}}, 0x11) [ 1044.299446][ T2119] Bluetooth: Unexpected continuation frame (len 12) 00:17:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) 00:17:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:17:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:17:24 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4}}}}, 0x11) 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "9af80f"}, {@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x22) 00:17:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:17:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1044.346881][ T2119] Bluetooth: Unexpected continuation frame (len 12) 00:17:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "9af80f"}, {@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x22) 00:17:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 00:17:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:17:24 executing program 3: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x20, 0x4}, {0xf8c4}}}}, 0x11) [ 1044.390224][ T2119] Bluetooth: Unexpected continuation frame (len 12) 00:17:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x3, 0x1}, 0x6) 00:17:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:17:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1f}, {0x2, [{@any, 0x0, 0x0, 0x0, "9af80f"}, {@none, 0x0, 0x0, 0x0, "1715e8"}]}}}, 0x22) 00:17:24 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 00:17:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 00:17:24 executing program 1: syz_emit_vhci(0x0, 0x0) 00:17:24 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 00:17:24 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 1: syz_emit_vhci(0x0, 0x0) 00:17:24 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 00:17:24 executing program 1: syz_emit_vhci(0x0, 0x0) 00:17:24 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 2: syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@any, 0x0, 0x0, 0x0, "9af80f"}]}}}, 0x13) 00:17:24 executing program 1: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1}}}, 0x4) 00:17:24 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 2: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 1: syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 1: syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 2: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 1: syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 2: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 1: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 5: syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 4: syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 2: syz_clone(0x80000200, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 1: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 5: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 3: syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 2: syz_clone(0x80000200, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 4: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 1: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 2: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 3: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 4: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 5: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 1: syz_clone(0x80000200, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 3: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 4: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 2: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:24 executing program 3: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:24 executing program 5: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 1: syz_clone(0x80000200, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 3: syz_clone(0x80000200, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 1: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 0: syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 4: syz_clone(0x80000200, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_clone(0x80000200, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 2: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 3: syz_clone(0x80000200, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_clone(0x80000200, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 4: syz_clone(0x80000200, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 2: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 1: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 3: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 0: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 2: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 3: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 4: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 1: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 2: syz_clone(0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 0: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 4: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 3: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 1: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 0: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 4: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 3: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 0: syz_clone(0x80000200, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 1: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 3: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 4: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 0: syz_clone(0x80000200, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 4: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 0: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 4: syz_clone(0x80000200, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 0: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 5: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 4: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 2: syz_clone(0x80000200, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 1: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 3: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) 00:17:25 executing program 2: syz_clone(0x80000200, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 1: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 4: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 2: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 3: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 1: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 4: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 2: syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 3: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 2: syz_clone(0x0, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) 00:17:25 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:25 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:17:26 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:26 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 00:17:26 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:17:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:26 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:26 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:17:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 00:17:26 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:26 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:26 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:17:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 00:17:26 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) 00:17:26 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) 00:17:26 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:17:26 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 00:17:26 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_clone(0x80000200, &(0x7f00000001c0)="0df9f06b02e41379242260b89c047e5ca763248fdee424e39b5ae1e55d1decf6d91acd55f582f36ec11a11d950564bdb33975fb47b77dac5cbdafc1a4bd8b14d2b38ecaf4266c5c10821d4ed415ca39b520edaf13a65f410a7fce61084039969e23a807bd3707b8b48c033dd8c8cee8d57488e748bd9ddf3bff7c55e1abe893de4e2bd57f0da48489344f3305a9b88d967fe1aa8db085a6eba67e482b8094d7e8b6e38e16f746b1fe8658f5cc42f74c1fd295b6a62e634739a27a28a467fc9ca93bcd28268c553345535fd801be1f430702c78a433b96a670e6ce60500d8725eba729631", 0xe4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="d5da97467dd125a3aa34da980f0628f2fc09e4b41a0630e109b1570c566388108f456f91b48debc64c5bbb2684a66a24c964bdf7711676af58c5a8b3a0498a70ed2b6e8da651f616deea495486537c21697ac8c7c99ef9ee83c08d6b9f113c3bf8a3f5970982e4beec271c02151bec6a3eb815c7c182accd8aae") 00:17:26 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) 00:17:26 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:17:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) 00:17:26 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:17:26 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 00:17:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x25, 0xa, 0xfffff9f1, &(0x7f0000000140)) 00:17:26 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) 00:17:26 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:17:26 executing program 4: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:17:26 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:17:26 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:17:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 00:17:26 executing program 4: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:17:26 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) 00:17:26 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 00:17:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) 00:17:26 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) 00:17:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) 00:17:26 executing program 4: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:17:26 executing program 2: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 00:17:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) 00:17:26 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 00:17:26 executing program 3: syz_open_dev$sndctrl(0x0, 0xfffffffffffffffe, 0x2ca01) 00:17:26 executing program 2: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 00:17:26 executing program 4: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:17:26 executing program 1: syz_open_dev$sndctrl(0x0, 0xfffffffffffffffe, 0x2ca01) 00:17:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) 00:17:26 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffe, 0x2ca01) openat$sw_sync_info