0000001a80)=[{&(0x7f0000001740)=""/154, 0x9a}, {&(0x7f0000001800)=""/169, 0xa9}, {&(0x7f00000018c0)=""/77, 0x4d}, {&(0x7f0000001940)=""/84, 0x54}, {&(0x7f0000001d40)=""/161, 0xa1}], 0x5, 0x0, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001b00)=""/149, 0x95}, &(0x7f0000001bc0), 0x15}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xff7}], 0xa8, 0x1}, 0x800) 23:03:51 executing program 0: r0 = socket(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x0, 0x70, 0x7, 0x2, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x7, 0x7, 0x81, 0x10000}}) 23:03:51 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xa5d0, 0x0, 0x4}) 23:03:51 executing program 3: r0 = socket(0x23, 0xa3a6d62338f732f9, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000040605000200000000000000000000030500010007000000050001000700000005dd0100070000000500010007000000350a80f3cef28d44ea8e704e42424eef97b7d4917cf7730a5879a54146cf645b1b0b8b79ba9cdb639f010908f22464344af2f20da87877358b2fdf14ef4116b51d378704ed0ffef52b"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0xd37802) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r2}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 23:03:51 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000019c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7fff, @bcast, @netrom={'nr', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001d00)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)={0x9c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xa68}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20000844) sendmsg$rds(r1, &(0x7f0000001cc0)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000080)=""/215, 0xd7}, {&(0x7f0000000180)=""/193, 0xc1}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f00000003c0)=""/99, 0x63}, {&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f00000005c0)=""/173, 0xad}], 0x9, &(0x7f0000001c00)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1ff}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x7}, {&(0x7f0000000740)=""/4096, 0x1000}, &(0x7f0000001a80)=[{&(0x7f0000001740)=""/154, 0x9a}, {&(0x7f0000001800)=""/169, 0xa9}, {&(0x7f00000018c0)=""/77, 0x4d}, {&(0x7f0000001940)=""/84, 0x54}, {&(0x7f0000001d40)=""/161, 0xa1}], 0x5, 0x0, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001b00)=""/149, 0x95}, &(0x7f0000001bc0), 0x15}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xff7}], 0xa8, 0x1}, 0x800) 23:03:51 executing program 5: r0 = socket(0x1d, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x1d, 0x4, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:03:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x3}) 23:03:51 executing program 0: r0 = socket(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:51 executing program 2: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @sdr={0x30314742, 0x7fffffff}}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008804}, 0x44000040) 23:03:51 executing program 3: r0 = socket(0x23, 0xa3a6d62338f732f9, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000040605000200000000000000000000030500010007000000050001000700000005dd0100070000000500010007000000350a80f3cef28d44ea8e704e42424eef97b7d4917cf7730a5879a54146cf645b1b0b8b79ba9cdb639f010908f22464344af2f20da87877358b2fdf14ef4116b51d378704ed0ffef52b"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0xd37802) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r2}, 0x14) 23:03:51 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:52 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000019c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7fff, @bcast, @netrom={'nr', 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001d00)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001a40)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)={0x9c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfc}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xa68}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20000844) sendmsg$rds(r1, &(0x7f0000001cc0)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000080)=""/215, 0xd7}, {&(0x7f0000000180)=""/193, 0xc1}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000340)=""/94, 0x5e}, {&(0x7f00000003c0)=""/99, 0x63}, {&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f00000005c0)=""/173, 0xad}], 0x9, &(0x7f0000001c00)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1ff}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x7}, {&(0x7f0000000740)=""/4096, 0x1000}, &(0x7f0000001a80)=[{&(0x7f0000001740)=""/154, 0x9a}, {&(0x7f0000001800)=""/169, 0xa9}, {&(0x7f00000018c0)=""/77, 0x4d}, {&(0x7f0000001940)=""/84, 0x54}, {&(0x7f0000001d40)=""/161, 0xa1}], 0x5, 0x0, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001b00)=""/149, 0x95}, &(0x7f0000001bc0), 0x15}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xff7}], 0xa8, 0x1}, 0x800) 23:03:52 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) 23:03:52 executing program 2: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @sdr={0x30314742, 0x7fffffff}}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008804}, 0x44000040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @sdr={0x30314742, 0x7fffffff}}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008804}, 0x44000040) (async) 23:03:52 executing program 3: r0 = socket(0x23, 0xa3a6d62338f732f9, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000040605000200000000000000000000030500010007000000050001000700000005dd0100070000000500010007000000350a80f3cef28d44ea8e704e42424eef97b7d4917cf7730a5879a54146cf645b1b0b8b79ba9cdb639f010908f22464344af2f20da87877358b2fdf14ef4116b51d378704ed0ffef52b"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0xd37802) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) 23:03:52 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x3}) (async) 23:03:52 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) (async) 23:03:52 executing program 4: socket(0x6, 0x3, 0x1) 23:03:52 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:52 executing program 2: ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @sdr={0x30314742, 0x7fffffff}}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008804}, 0x44000040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x2, @sdr={0x30314742, 0x7fffffff}}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008804}, 0x44000040) (async) 23:03:52 executing program 3: r0 = socket(0x23, 0xa3a6d62338f732f9, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000040605000200000000000000000000030500010007000000050001000700000005dd0100070000000500010007000000350a80f3cef28d44ea8e704e42424eef97b7d4917cf7730a5879a54146cf645b1b0b8b79ba9cdb639f010908f22464344af2f20da87877358b2fdf14ef4116b51d378704ed0ffef52b"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0xd37802) socket$nl_netfilter(0x10, 0x3, 0xc) 23:03:52 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) 23:03:52 executing program 4: socket(0x6, 0x3, 0x1) 23:03:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x3}) (rerun: 32) 23:03:52 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:52 executing program 3: r0 = socket(0x23, 0xa3a6d62338f732f9, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000040605000200000000000000000000030500010007000000050001000700000005dd0100070000000500010007000000350a80f3cef28d44ea8e704e42424eef97b7d4917cf7730a5879a54146cf645b1b0b8b79ba9cdb639f010908f22464344af2f20da87877358b2fdf14ef4116b51d378704ed0ffef52b"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0xd37802) 23:03:52 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:03:52 executing program 4: socket(0x6, 0x3, 0x1) 23:03:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:52 executing program 4: getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) socket(0xb, 0x3, 0x1) 23:03:52 executing program 0: r0 = socket(0x0, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:52 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:03:52 executing program 3: r0 = socket(0x23, 0xa3a6d62338f732f9, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000040605000200000000000000000000030500010007000000050001000700000005dd0100070000000500010007000000350a80f3cef28d44ea8e704e42424eef97b7d4917cf7730a5879a54146cf645b1b0b8b79ba9cdb639f010908f22464344af2f20da87877358b2fdf14ef4116b51d378704ed0ffef52b"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4) 23:03:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:52 executing program 4: getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) (async) socket(0xb, 0x3, 0x1) 23:03:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x40}) 23:03:52 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) (async) 23:03:52 executing program 3: r0 = socket(0x23, 0xa3a6d62338f732f9, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:52 executing program 4: getpeername$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) socket(0xb, 0x3, 0x1) 23:03:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = socket(0x3, 0x1, 0x8) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @local}]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:52 executing program 0: r0 = socket(0x0, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:52 executing program 5: r0 = socket(0x1d, 0x3, 0x800) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:52 executing program 3: socket(0x23, 0xa3a6d62338f732f9, 0x1) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) 23:03:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = socket(0x3, 0x1, 0x8) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @local}]}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x40}) 23:03:52 executing program 5: r0 = socket(0x1d, 0x3, 0x800) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x1d, 0x3, 0x800) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:03:52 executing program 0: r0 = socket(0x0, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:52 executing program 4: socket(0x1d, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000001c0)=0x1460080) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x3f, 0x82400) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000180)=0x8) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)={r4, 0x1, 0x8, "65337b57fd4eb678d4277b9d42057fad3be1ad564698eb03e8413a8f82c11d997827e8211d8a34f53f39d468388e1e4157ab3d985f986d7b2559686c6bf3623b904db460f9e2419e50e9551b5dbe0388d83b1106dbb6d52bf1b52d21dfae9cbf349d90ab5874015da90ff32add7a3819fc8df87cff127eb43ca2f8b353643f77b44704050b05057af5aefa804c45d1cf70aae1"}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r5) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r5) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r7, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022cbd7000fbdbdf250900000008000300", @ANYRES32=0x0, @ANYBLOB="f6ff3600000000000500370000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 23:03:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r1 = socket(0x3, 0x1, 0x8) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @local}]}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (rerun: 64) 23:03:52 executing program 3: socket(0x23, 0xa3a6d62338f732f9, 0x1) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) 23:03:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x40}) 23:03:52 executing program 4: socket(0x1d, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000001c0)=0x1460080) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x3f, 0x82400) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000180)=0x8) (async, rerun: 32) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)={r4, 0x1, 0x8, "65337b57fd4eb678d4277b9d42057fad3be1ad564698eb03e8413a8f82c11d997827e8211d8a34f53f39d468388e1e4157ab3d985f986d7b2559686c6bf3623b904db460f9e2419e50e9551b5dbe0388d83b1106dbb6d52bf1b52d21dfae9cbf349d90ab5874015da90ff32add7a3819fc8df87cff127eb43ca2f8b353643f77b44704050b05057af5aefa804c45d1cf70aae1"}) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) (rerun: 64) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r5) (async, rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r5) (rerun: 32) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r7, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022cbd7000fbdbdf250900000008000300", @ANYRES32=0x0, @ANYBLOB="f6ff3600000000000500370000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 23:03:52 executing program 5: r0 = socket(0x1d, 0x3, 0x800) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:52 executing program 3: socket(0x23, 0xa3a6d62338f732f9, 0x1) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) 23:03:52 executing program 0: r0 = socket(0x1d, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000080)) 23:03:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000480)={0x15, 0x1, 0x4, 0x0, 0x40}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x60, 0x0, &(0x7f0000000340)=[@increfs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x0, 0x1, 0x2a}, @flat=@binder={0x73622a85, 0x0, 0x81}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/137, 0x89}}, &(0x7f0000000300)={0x0, 0x20, 0x38}}, 0x1000}, @increfs={0x40046304, 0x1}, @exit_looper], 0x64, 0x0, &(0x7f00000003c0)="89f32b76a4bad1ae08c0f6fcdb295c70f2a9f8100cd889c37fd9aed8c21937a43221842adbcd89ff832c04b9645ef53b35885611c2d70cdbc6c243432ad54b9ec5be114d25ec6d019b6427c1b234e7bea121b4510746af43177618581848cd451660ed42"}) socket$nl_generic(0x10, 0x3, 0x10) 23:03:52 executing program 5: socket(0x29, 0x1, 0xffffff26) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:03:52 executing program 0: r0 = socket(0x1d, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:52 executing program 3: socket(0x23, 0xa3a6d62338f732f9, 0x1) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) 23:03:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000080)) 23:03:52 executing program 5: socket(0x29, 0x1, 0xffffff26) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket(0x29, 0x1, 0xffffff26) (async) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) (async) 23:03:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000480)={0x15, 0x1, 0x4, 0x0, 0x40}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x60, 0x0, &(0x7f0000000340)=[@increfs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x0, 0x1, 0x2a}, @flat=@binder={0x73622a85, 0x0, 0x81}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/137, 0x89}}, &(0x7f0000000300)={0x0, 0x20, 0x38}}, 0x1000}, @increfs={0x40046304, 0x1}, @exit_looper], 0x64, 0x0, &(0x7f00000003c0)="89f32b76a4bad1ae08c0f6fcdb295c70f2a9f8100cd889c37fd9aed8c21937a43221842adbcd89ff832c04b9645ef53b35885611c2d70cdbc6c243432ad54b9ec5be114d25ec6d019b6427c1b234e7bea121b4510746af43177618581848cd451660ed42"}) socket$nl_generic(0x10, 0x3, 0x10) 23:03:52 executing program 4: socket(0x1d, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000001c0)=0x1460080) (async) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x3f, 0x82400) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000180)=0x8) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)={r4, 0x1, 0x8, "65337b57fd4eb678d4277b9d42057fad3be1ad564698eb03e8413a8f82c11d997827e8211d8a34f53f39d468388e1e4157ab3d985f986d7b2559686c6bf3623b904db460f9e2419e50e9551b5dbe0388d83b1106dbb6d52bf1b52d21dfae9cbf349d90ab5874015da90ff32add7a3819fc8df87cff127eb43ca2f8b353643f77b44704050b05057af5aefa804c45d1cf70aae1"}) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r5) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r5) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r7, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022cbd7000fbdbdf250900000008000300", @ANYRES32=0x0, @ANYBLOB="f6ff3600000000000500370000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 23:03:52 executing program 0: r0 = socket(0x1d, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:52 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000080)) 23:03:52 executing program 0: r0 = socket(0x1d, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:52 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) 23:03:52 executing program 5: socket(0x29, 0x1, 0xffffff26) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket(0x29, 0x1, 0xffffff26) (async) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) (async) 23:03:52 executing program 4: bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @remote}}, 0x1e) socket(0x1d, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x200000000, 0x2000) bind$rose(r0, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, [@bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xcb, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x2, 0x3, 0x1, 0x0, 0x6}) 23:03:52 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000480)={0x15, 0x1, 0x4, 0x0, 0x40}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x60, 0x0, &(0x7f0000000340)=[@increfs, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x0, 0x1, 0x2a}, @flat=@binder={0x73622a85, 0x0, 0x81}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/137, 0x89}}, &(0x7f0000000300)={0x0, 0x20, 0x38}}, 0x1000}, @increfs={0x40046304, 0x1}, @exit_looper], 0x64, 0x0, &(0x7f00000003c0)="89f32b76a4bad1ae08c0f6fcdb295c70f2a9f8100cd889c37fd9aed8c21937a43221842adbcd89ff832c04b9645ef53b35885611c2d70cdbc6c243432ad54b9ec5be114d25ec6d019b6427c1b234e7bea121b4510746af43177618581848cd451660ed42"}) (async) socket$nl_generic(0x10, 0x3, 0x10) 23:03:52 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x134, 0x1, 0x3, 0x801, 0x0, 0x0, {0x17, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_PAYLOAD={0x63, 0xa, "a1485afa8311d31a77037fbf8e3380f08ec5e0d895aef5968a87560d74c22f3b631af2a5aeefc3bd02bcb31c577353f3a51deda14d254d29503d2bf79c55f08b5abfb36678c1ef1896b130bb6cfa4edabdb153e8ab5a54651460db3586138f"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3f}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x197}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffff80}, @NFQA_EXP={0x6c, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40800}, 0x8081) 23:03:52 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x0, 0x1}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@mcast1}, 0x14) 23:03:52 executing program 0: r0 = socket(0x1d, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:52 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) 23:03:52 executing program 4: bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @remote}}, 0x1e) socket(0x1d, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x200000000, 0x2000) bind$rose(r0, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, [@bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xcb, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x2, 0x3, 0x1, 0x0, 0x6}) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @remote}}, 0x1e) (async) socket(0x1d, 0x3, 0x1) (async) syz_open_dev$audion(&(0x7f0000000040), 0x200000000, 0x2000) (async) bind$rose(r0, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, [@bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0xcb, 0x2) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x2, 0x3, 0x1, 0x0, 0x6}) (async) [ 1319.093123] can_create: 8 callbacks suppressed [ 1319.093128] can: request_module (can-proto-0) failed. 23:03:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) socket$rds(0x15, 0x5, 0x0) 23:03:53 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async, rerun: 32) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x0, 0x1}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@mcast1}, 0x14) 23:03:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) [ 1319.154225] can: request_module (can-proto-0) failed. 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) socket$rds(0x15, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) socket$rds(0x15, 0x5, 0x0) (async) 23:03:53 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x134, 0x1, 0x3, 0x801, 0x0, 0x0, {0x17, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_PAYLOAD={0x63, 0xa, "a1485afa8311d31a77037fbf8e3380f08ec5e0d895aef5968a87560d74c22f3b631af2a5aeefc3bd02bcb31c577353f3a51deda14d254d29503d2bf79c55f08b5abfb36678c1ef1896b130bb6cfa4edabdb153e8ab5a54651460db3586138f"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3f}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x197}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffff80}, @NFQA_EXP={0x6c, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40800}, 0x8081) 23:03:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) 23:03:53 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000008, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x0, 0x1}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@mcast1}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000008, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x0, 0x1}) (async) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@mcast1}, 0x14) (async) 23:03:53 executing program 4: bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @remote}}, 0x1e) (async) socket(0x1d, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040), 0x200000000, 0x2000) bind$rose(r0, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, [@bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) (async) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0xcb, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x2, 0x3, 0x1, 0x0, 0x6}) 23:03:53 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x134, 0x1, 0x3, 0x801, 0x0, 0x0, {0x17, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_PAYLOAD={0x63, 0xa, "a1485afa8311d31a77037fbf8e3380f08ec5e0d895aef5968a87560d74c22f3b631af2a5aeefc3bd02bcb31c577353f3a51deda14d254d29503d2bf79c55f08b5abfb36678c1ef1896b130bb6cfa4edabdb153e8ab5a54651460db3586138f"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3f}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x197}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffff80}, @NFQA_EXP={0x6c, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40800}, 0x8081) 23:03:53 executing program 0: socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:53 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) [ 1319.250785] can: request_module (can-proto-0) failed. 23:03:53 executing program 4: socket(0x1d, 0x3, 0x1) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @sdr={0x47504a50, 0xffffffff}}) 23:03:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) socket$rds(0x15, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) socket$rds(0x15, 0x5, 0x0) (async) 23:03:53 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@fd={0x7fffffff, 0x0, 0x4, 0x1000, 0x5, {r1, r2/1000+60000}, {0x2, 0x4, 0x8, 0x3, 0x0, 0xf7, "453cd07c"}, 0x9, 0x4, {}, 0x3}) 23:03:53 executing program 5: r0 = socket(0x2, 0x800, 0x8007) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 23:03:53 executing program 0: socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:53 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@fd={0x7fffffff, 0x0, 0x4, 0x1000, 0x5, {r1, r2/1000+60000}, {0x2, 0x4, 0x8, 0x3, 0x0, 0xf7, "453cd07c"}, 0x9, 0x4, {}, 0x3}) 23:03:53 executing program 5: r0 = socket(0x2, 0x800, 0x8007) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 23:03:53 executing program 4: socket(0x1d, 0x3, 0x1) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @sdr={0x47504a50, 0xffffffff}}) 23:03:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 23:03:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x0, 0x3, 0x4, 0x4040, 0x4, {}, {0x3, 0x0, 0x9, 0xff, 0x2, 0xcd, "6ea024fa"}, 0x1, 0x3, {&(0x7f0000000100)=[{0xa4, 0x9, {}, 0x6}, {0x6, 0x1, {0xfffffff9}, 0xec14}]}, 0x1745}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:53 executing program 0: socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@fd={0x7fffffff, 0x0, 0x4, 0x1000, 0x5, {r1, r2/1000+60000}, {0x2, 0x4, 0x8, 0x3, 0x0, 0xf7, "453cd07c"}, 0x9, 0x4, {}, 0x3}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) clock_gettime(0x0, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@fd={0x7fffffff, 0x0, 0x4, 0x1000, 0x5, {r1, r2/1000+60000}, {0x2, 0x4, 0x8, 0x3, 0x0, 0xf7, "453cd07c"}, 0x9, 0x4, {}, 0x3}) (async) 23:03:53 executing program 5: r0 = socket(0x2, 0x800, 0x8007) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 23:03:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 23:03:53 executing program 4: socket(0x1d, 0x3, 0x1) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x2, @sdr={0x47504a50, 0xffffffff}}) 23:03:53 executing program 5: r0 = socket(0x28, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x0, 0x3, 0x4, 0x4040, 0x4, {}, {0x3, 0x0, 0x9, 0xff, 0x2, 0xcd, "6ea024fa"}, 0x1, 0x3, {&(0x7f0000000100)=[{0xa4, 0x9, {}, 0x6}, {0x6, 0x1, {0xfffffff9}, 0xec14}]}, 0x1745}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:53 executing program 5: r0 = socket(0x28, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:53 executing program 4: r0 = socket(0x1d, 0x3, 0x10001) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3f, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) 23:03:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 23:03:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x0, 0x3, 0x4, 0x4040, 0x4, {}, {0x3, 0x0, 0x9, 0xff, 0x2, 0xcd, "6ea024fa"}, 0x1, 0x3, {&(0x7f0000000100)=[{0xa4, 0x9, {}, 0x6}, {0x6, 0x1, {0xfffffff9}, 0xec14}]}, 0x1745}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x0, 0x3, 0x4, 0x4040, 0x4, {}, {0x3, 0x0, 0x9, 0xff, 0x2, 0xcd, "6ea024fa"}, 0x1, 0x3, {&(0x7f0000000100)=[{0xa4, 0x9, {}, 0x6}, {0x6, 0x1, {0xfffffff9}, 0xec14}]}, 0x1745}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x7}, 0x10) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:53 executing program 4: r0 = socket(0x1d, 0x3, 0x10001) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3f, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 23:03:53 executing program 5: r0 = socket(0x28, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x7}, 0x10) 23:03:53 executing program 4: r0 = socket(0x1d, 0x3, 0x10001) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3f, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) socket(0x1d, 0x3, 0x10001) (async) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3f, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x7, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) (async) 23:03:53 executing program 5: r0 = socket(0x1a, 0x3, 0x2) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 23:03:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x400, 0x3, 0x4, 0x4000, 0x8, {0x0, 0x2710}, {0x2, 0x1, 0x9, 0x1, 0x8, 0x3, "ee481a2e"}, 0x7fff, 0x1, {&(0x7f00000000c0)=[{0x62, 0x7, {0x5}, 0xfffffff9}, {0x9, 0x8, {0x4}, 0x9}]}, 0x267d}) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7, 0x0, 0x3}) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @remote, @null, 0x1, @default}, &(0x7f0000000140)=0x1c, 0x81800) connect$rose(r1, &(0x7f0000000180)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) socket$rds(0x15, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x40, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 23:03:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x7}, 0x10) 23:03:53 executing program 5: r0 = socket(0x1a, 0x3, 0x2) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x1a, 0x3, 0x2) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:03:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x400, 0x3, 0x4, 0x4000, 0x8, {0x0, 0x2710}, {0x2, 0x1, 0x9, 0x1, 0x8, 0x3, "ee481a2e"}, 0x7fff, 0x1, {&(0x7f00000000c0)=[{0x62, 0x7, {0x5}, 0xfffffff9}, {0x9, 0x8, {0x4}, 0x9}]}, 0x267d}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x400, 0x3, 0x4, 0x4000, 0x8, {0x0, 0x2710}, {0x2, 0x1, 0x9, 0x1, 0x8, 0x3, "ee481a2e"}, 0x7fff, 0x1, {&(0x7f00000000c0)=[{0x62, 0x7, {0x5}, 0xfffffff9}, {0x9, 0x8, {0x4}, 0x9}]}, 0x267d}) (async) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) 23:03:53 executing program 4: r0 = socket(0x25, 0x3, 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r1, 0x4, 0x0, "d61f17e025c2d2b6646194ee62e625a220b684031c28818de623c7a1d19105a134fdb39dc131234633b0c3f1ce4ee03b18a49de25c6d3d6597aeedf2157df2261c9e8192f9242efa1386ede524e2e5966d2fbfa41f1c0c674c01dc8be8d430c696fd85c9173e4a636638d66fd9ad6098e6d8050222c46044fdfb7731305c553bce1fbeb2958b3159819dfc4e3986240533a9b2ace7d0caf48c89"}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x61, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r5) bind$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000180)={@remote, r4}, 0x14) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000080) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x0, 0x1f, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x7}, 0x10) 23:03:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x400, 0x3, 0x4, 0x4000, 0x8, {0x0, 0x2710}, {0x2, 0x1, 0x9, 0x1, 0x8, 0x3, "ee481a2e"}, 0x7fff, 0x1, {&(0x7f00000000c0)=[{0x62, 0x7, {0x5}, 0xfffffff9}, {0x9, 0x8, {0x4}, 0x9}]}, 0x267d}) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7, 0x0, 0x3}) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @remote, @null, 0x1, @default}, &(0x7f0000000140)=0x1c, 0x81800) connect$rose(r1, &(0x7f0000000180)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) socket$rds(0x15, 0x5, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x40, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7, 0x0, 0x3}) (async) accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @remote, @null, 0x1, @default}, &(0x7f0000000140)=0x1c, 0x81800) (async) connect$rose(r1, &(0x7f0000000180)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x40, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) 23:03:53 executing program 4: r0 = socket(0x25, 0x3, 0x8) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r1, 0x4, 0x0, "d61f17e025c2d2b6646194ee62e625a220b684031c28818de623c7a1d19105a134fdb39dc131234633b0c3f1ce4ee03b18a49de25c6d3d6597aeedf2157df2261c9e8192f9242efa1386ede524e2e5966d2fbfa41f1c0c674c01dc8be8d430c696fd85c9173e4a636638d66fd9ad6098e6d8050222c46044fdfb7731305c553bce1fbeb2958b3159819dfc4e3986240533a9b2ace7d0caf48c89"}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x61, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r5) (async) bind$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000180)={@remote, r4}, 0x14) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000080) 23:03:53 executing program 5: r0 = socket(0x1a, 0x3, 0x2) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x1a, 0x3, 0x2) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:03:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1}, 0x10) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x0, 0x0, 0xa6, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:53 executing program 4: r0 = socket(0x25, 0x3, 0x8) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r1, 0x4, 0x0, "d61f17e025c2d2b6646194ee62e625a220b684031c28818de623c7a1d19105a134fdb39dc131234633b0c3f1ce4ee03b18a49de25c6d3d6597aeedf2157df2261c9e8192f9242efa1386ede524e2e5966d2fbfa41f1c0c674c01dc8be8d430c696fd85c9173e4a636638d66fd9ad6098e6d8050222c46044fdfb7731305c553bce1fbeb2958b3159819dfc4e3986240533a9b2ace7d0caf48c89"}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x61, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) (async, rerun: 32) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r5) (async) bind$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) (async, rerun: 32) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000180)={@remote, r4}, 0x14) (async, rerun: 32) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000080) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7, 0x0, 0x3}) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @remote, @null, 0x1, @default}, &(0x7f0000000140)=0x1c, 0x81800) connect$rose(r1, &(0x7f0000000180)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x40, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x1000, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x1, 0x0, 0x7}, 0x10) 23:03:53 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x6, 0xe58, 0x3, {0x3, @sdr={0x1b00, 0x725d}}, 0x2}) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x599, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:53 executing program 4: socket(0x1d, 0x3, 0xffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000209010100002000004b9033646c9ae7996ffde5f9340000000a0000090806000000ffffab72df88b36ef87d62ef5725d5bcb53e9eeb0d25fd01a1b6caa3584c267eb6182091a0d623095ad5da554a50e256a1175a75188ab83e71c98be565be39f56928e7a4782ba5039f14343a53e4615bbab6723db2360d629b3eb5908afeb7ef7a5d84fa476fc037832912be5894010d75c00247795c2cb4de456134a41bad"], 0x1c}}, 0x24044004) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xfffffff9, 0x5, 0x2}) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @local, 0x7800, 0x8, 0x80000000, 0x4}}) 23:03:53 executing program 3: r0 = socket(0x25, 0x3, 0x8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r1, 0x4, 0x0, "d61f17e025c2d2b6646194ee62e625a220b684031c28818de623c7a1d19105a134fdb39dc131234633b0c3f1ce4ee03b18a49de25c6d3d6597aeedf2157df2261c9e8192f9242efa1386ede524e2e5966d2fbfa41f1c0c674c01dc8be8d430c696fd85c9173e4a636638d66fd9ad6098e6d8050222c46044fdfb7731305c553bce1fbeb2958b3159819dfc4e3986240533a9b2ace7d0caf48c89"}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x61, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r5) bind$pptp(r5, &(0x7f00000000c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000180)={@remote, r4}, 0x14) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008050}, 0x20000080) 23:03:53 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x6, 0xe58, 0x3, {0x3, @sdr={0x1b00, 0x725d}}, 0x2}) (async) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) 23:03:53 executing program 4: socket(0x1d, 0x3, 0xffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) socket(0x1d, 0x3, 0xffffffff) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) (async) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000209010100002000004b9033646c9ae7996ffde5f9340000000a0000090806000000ffffab72df88b36ef87d62ef5725d5bcb53e9eeb0d25fd01a1b6caa3584c267eb6182091a0d623095ad5da554a50e256a1175a75188ab83e71c98be565be39f56928e7a4782ba5039f14343a53e4615bbab6723db2360d629b3eb5908afeb7ef7a5d84fa476fc037832912be5894010d75c00247795c2cb4de456134a41bad"], 0x1c}}, 0x24044004) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xfffffff9, 0x5, 0x2}) 23:03:53 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 23:03:53 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x6, 0xe58, 0x3, {0x3, @sdr={0x1b00, 0x725d}}, 0x2}) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x6, 0xe58, 0x3, {0x3, @sdr={0x1b00, 0x725d}}, 0x2}) (async) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) (async) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @local, 0x0, 0x8, 0x80000000, 0x4}}) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000209010100002000004b9033646c9ae7996ffde5f9340000000a0000090806000000ffffab72df88b36ef87d62ef5725d5bcb53e9eeb0d25fd01a1b6caa3584c267eb6182091a0d623095ad5da554a50e256a1175a75188ab83e71c98be565be39f56928e7a4782ba5039f14343a53e4615bbab6723db2360d629b3eb5908afeb7ef7a5d84fa476fc037832912be5894010d75c00247795c2cb4de456134a41bad"], 0x1c}}, 0x24044004) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xfffffff9, 0x5, 0x2}) 23:03:53 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x599, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x599, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:53 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @local, 0x0, 0x0, 0x80000000, 0x4}}) 23:03:53 executing program 4: socket(0x1d, 0x3, 0xffffffff) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c) 23:03:53 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x599, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:53 executing program 5: r0 = socket(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000020901080000000000000000000000000800054000000000cfefca4b63665d3897b87775783680f45af80f93c932ed30940610a99e80b4651f0b44dd45f45ecb274471076132f3d223d9fe8deb23e6d452b359ed708810b4804bb2b1978161"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8890) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4048054) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000140)={0xaa8, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xa94, 0x3, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "5e4ab72ba2776067f8cc13ac86c2ee5e9cc9a5afc4f2cb806fef3c10e30e53058df6c439f2e501d6943bd2bce95c921578f1f3581ee2611a2c2bb65b379238898f26254cd5d1ba02fa1f7543ca6946d71201d20147af7f4f8b7c36f9327c4ce6502ee514db2686bf1d2dce571f4bea515209217f9e4657fa31d662a913cb"}, @NFTA_DATA_VALUE={0xca, 0x1, "8dee6571e6005dc7a5c1214e274507d41931a1e53ed90866a21f3bf2802351eeb6610c5fd1a054eed0e9ee331ac6943a4e59a6fefe2acf6a0664bff0d01af9ebaa02a70bd7d0b408e8f5a29d48bb92ad061ac8c0c0bcb9d9003091809926124e9ecb828c8d465bdae3c73acc5aace35240b98c7eff96331d5c0a805e24626dbb4f4eb845dec47746e8546b0e52ad6f645a55842de7655b1cf9059627193f2de8f5c5e18536f3e88a3220794a425c815a474d6faacfae190682cd18294ec42e9d09459c221fc8"}]}, @NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "1057986cb8d7cbde6954d3fd717f35a525f29cc3b0750d50a2c238b6e33d7748a56830a1a28c2d06e6b92898ad9d64380a846bd946"}, @NFTA_DATA_VALUE={0xb0, 0x1, "552fd173fba5f1d1906ce8b5fe5d1ea4c7858a1de794fe096e20ca59c5cfeafa015211b57c916684f7fb8aa3ce8eb5a2ad832fdbfb0ae244adb8fab2cccd3c981d7add7f5e7cb143ff0713ada5100d1d82f46cdaf27f4d064d96a4ee96156f150c1937db185fb049ad91df42cb702ef77b3438e68a9f1bb544eb52a45f07b6462cdb3b813e92e4eabf58b023308e5c08c0257e32e723c55dbffeaf18d589c21042c8b162ba9c906982a34941"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}, {0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x25c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "1e453531a59986d1cd67e48a86a41afcd611b53a29e667ecdc025083b1c553a9eeb8df07abce03ce215204131a0f620e7d3dc2e908f3406a6dc3ed97445ccfb86fc65f356289c9850b93658bdf55fc470dd208f0385e08ed3d24be81ea027fb02cb9a348be0f6f863f319e1adf135559091ef7866125c6e583e69ebcba74609819d22ca4c352d3844dafe4861979d7af4967095c3754164f2e3c281eafdd7d2c0989f6ea9d8bacbf73f571ecc3439b49dc963b"}, @NFTA_DATA_VALUE={0x75, 0x1, "80f25d6ef219d664b21a2636591a6564b4c35fb5c09c5e6323f4e030ca8b160908f5dc56748af37a96efeaabb0d5657dccf44bab857be043a2c24bf649290f01e2bc437852f7c52887136ea73e33b2b79c4e15a4c7d28e1d731932a225cf2bf7c003a73bfcb26a9f984a6b1d665eb09144"}, @NFTA_DATA_VALUE={0x5e, 0x1, "90a7e078b549323cd9a5bede5ab5da9ef4b6e91719da673b105f947e042c12cd168e6b26baeda7b0190a9dd3aba9afc116f7cd09434a14847fa3a8b57d74a54d3ee25b51cceeeb6a9122754bd3dac6222646b715013ea4246235"}, @NFTA_DATA_VALUE={0x9, 0x1, "a926f0af99"}, @NFTA_DATA_VALUE={0xb9, 0x1, "311cbe676ec5b97c15756f2f2eafde85d6b08f20489d3781711ed571375f8faab5d716e8fa5092dc677eec5ce2a1566ab2b51e164965c1bada4cb58c01892911835d65d972e7253437a9e12d46b39a72787f9fb5d91e0a8797452a6b3d5769fa05c9985891bdc2f12f33b56cf1bb818c371567633ed1fd10fd24b24d63482eecb29508255f5be563b6d6c36af69c9d238fa7fc55ce0e47e778e63a95bbfa0c429f6783b47cf38dd9fb04ba0579d6fd55556ffc8837"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x42}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x58}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5e, 0x6, 0x1, 0x0, "7bd01e94061eea071fcfbd0cbd9536905b35e84460e82fc00941a811e84fcc6efa938691cc085b533962b538596925958718067540cea9b5747e5c6d536d5f6fd82f3f4c02408040818d5cb168fda98ac82d6ff11948193d8c45"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x50, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x40}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1000}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x36c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xfbfc957d39f2d75f}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_KEY_END={0x278, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8a, 0x1, "7c7321ba10e50c85b01f8588e8ca56350ba594aece24f8d9482a906736f262f871b69fe207e25425a186095259ab4ccb75f83f8d06961e8af30a55d4775929d14dea1e3c14e19b5955cae29407d1e28ecf6ce742790593df1c1d6e71bb0152857b3c74e9de49f057fe562bcdd719b597e6bdade99f05c897357889ab37569ead0212839c1965"}, @NFTA_DATA_VALUE={0x87, 0x1, "0b6fa4b24dd3b07e6791665b24425185e260d76a7ad9e969b1607a6263933ea799fd26e4f1dae4a8850a7a753728424e99788b99f1c248a9762408a1574591471868475a4422787be142eb2a624683a5470286abd1709435ef29f49035bef30f8a558c211c6f7c3e2f24132ea80a2a69c79460f6e4776d22cf10b768a7732cc1d1403d"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "8573d4967fd2167c38f1f9419cf5d866945ff93aefa89c63b60015869bccd2af7dbb455d3cbf99bfdb2a0692452c647d0c354509d414e426c9235c2674d5d6794951802b0e169f005a285467ae3eaa4da9c979e0a067408080c3b48c4873a738dfc72cdbcb21ee6217f3fdad436e85ef0dd8b14d6a33b9b60229822c30f69db6da872acefa7fb12cd6d9ddb3ce53b3fbe4cb18f92199c7a05b7533d634e46a3c5dbf0d47f2807209027813393e71765c09166ff1a63bc3537599451a6f9195ccd6aada5a49d8fbbe1c94985b76831ef6cec832c6a176eed74e7573325aae5640f1c5f74ad24527fece1d8844331c3146d63c4d6d51"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "12125f8e24f8a6c6ea6788c91f48d1365753d522831539"}]}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "fa330e784884b8bc9da1a1a2be60685ce883bc662206cd07e5f3c072add806b9e2614078562248d2249d98563df8"}, @NFTA_DATA_VALUE={0x17, 0x1, "0ccd0b163401d92b85476f6c4700129048f448"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}, 0xaa8}}, 0x4000800) 23:03:53 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_fd={0x6f, 0x2, 0x4, 0x70000, 0x2, {}, {0x3, 0xc, 0x80, 0x7f, 0x7, 0x40, "c76e82b2"}, 0x7a, 0x4, {&(0x7f0000000080)=[{0xffffffe1, 0x8000, {}, 0x80000001}, {0x8, 0xffffffff, {}, 0x4c65}]}, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:53 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4011) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24008084) socket(0x1d, 0x3, 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8054) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa27}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x2000a840) 23:03:54 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @local, 0x0, 0x0, 0x0, 0x4}}) 23:03:54 executing program 5: r0 = socket(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000020901080000000000000000000000000800054000000000cfefca4b63665d3897b87775783680f45af80f93c932ed30940610a99e80b4651f0b44dd45f45ecb274471076132f3d223d9fe8deb23e6d452b359ed708810b4804bb2b1978161"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8890) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4048054) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000140)={0xaa8, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xa94, 0x3, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "5e4ab72ba2776067f8cc13ac86c2ee5e9cc9a5afc4f2cb806fef3c10e30e53058df6c439f2e501d6943bd2bce95c921578f1f3581ee2611a2c2bb65b379238898f26254cd5d1ba02fa1f7543ca6946d71201d20147af7f4f8b7c36f9327c4ce6502ee514db2686bf1d2dce571f4bea515209217f9e4657fa31d662a913cb"}, @NFTA_DATA_VALUE={0xca, 0x1, "8dee6571e6005dc7a5c1214e274507d41931a1e53ed90866a21f3bf2802351eeb6610c5fd1a054eed0e9ee331ac6943a4e59a6fefe2acf6a0664bff0d01af9ebaa02a70bd7d0b408e8f5a29d48bb92ad061ac8c0c0bcb9d9003091809926124e9ecb828c8d465bdae3c73acc5aace35240b98c7eff96331d5c0a805e24626dbb4f4eb845dec47746e8546b0e52ad6f645a55842de7655b1cf9059627193f2de8f5c5e18536f3e88a3220794a425c815a474d6faacfae190682cd18294ec42e9d09459c221fc8"}]}, @NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "1057986cb8d7cbde6954d3fd717f35a525f29cc3b0750d50a2c238b6e33d7748a56830a1a28c2d06e6b92898ad9d64380a846bd946"}, @NFTA_DATA_VALUE={0xb0, 0x1, "552fd173fba5f1d1906ce8b5fe5d1ea4c7858a1de794fe096e20ca59c5cfeafa015211b57c916684f7fb8aa3ce8eb5a2ad832fdbfb0ae244adb8fab2cccd3c981d7add7f5e7cb143ff0713ada5100d1d82f46cdaf27f4d064d96a4ee96156f150c1937db185fb049ad91df42cb702ef77b3438e68a9f1bb544eb52a45f07b6462cdb3b813e92e4eabf58b023308e5c08c0257e32e723c55dbffeaf18d589c21042c8b162ba9c906982a34941"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}, {0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x25c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "1e453531a59986d1cd67e48a86a41afcd611b53a29e667ecdc025083b1c553a9eeb8df07abce03ce215204131a0f620e7d3dc2e908f3406a6dc3ed97445ccfb86fc65f356289c9850b93658bdf55fc470dd208f0385e08ed3d24be81ea027fb02cb9a348be0f6f863f319e1adf135559091ef7866125c6e583e69ebcba74609819d22ca4c352d3844dafe4861979d7af4967095c3754164f2e3c281eafdd7d2c0989f6ea9d8bacbf73f571ecc3439b49dc963b"}, @NFTA_DATA_VALUE={0x75, 0x1, "80f25d6ef219d664b21a2636591a6564b4c35fb5c09c5e6323f4e030ca8b160908f5dc56748af37a96efeaabb0d5657dccf44bab857be043a2c24bf649290f01e2bc437852f7c52887136ea73e33b2b79c4e15a4c7d28e1d731932a225cf2bf7c003a73bfcb26a9f984a6b1d665eb09144"}, @NFTA_DATA_VALUE={0x5e, 0x1, "90a7e078b549323cd9a5bede5ab5da9ef4b6e91719da673b105f947e042c12cd168e6b26baeda7b0190a9dd3aba9afc116f7cd09434a14847fa3a8b57d74a54d3ee25b51cceeeb6a9122754bd3dac6222646b715013ea4246235"}, @NFTA_DATA_VALUE={0x9, 0x1, "a926f0af99"}, @NFTA_DATA_VALUE={0xb9, 0x1, "311cbe676ec5b97c15756f2f2eafde85d6b08f20489d3781711ed571375f8faab5d716e8fa5092dc677eec5ce2a1566ab2b51e164965c1bada4cb58c01892911835d65d972e7253437a9e12d46b39a72787f9fb5d91e0a8797452a6b3d5769fa05c9985891bdc2f12f33b56cf1bb818c371567633ed1fd10fd24b24d63482eecb29508255f5be563b6d6c36af69c9d238fa7fc55ce0e47e778e63a95bbfa0c429f6783b47cf38dd9fb04ba0579d6fd55556ffc8837"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x42}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x58}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5e, 0x6, 0x1, 0x0, "7bd01e94061eea071fcfbd0cbd9536905b35e84460e82fc00941a811e84fcc6efa938691cc085b533962b538596925958718067540cea9b5747e5c6d536d5f6fd82f3f4c02408040818d5cb168fda98ac82d6ff11948193d8c45"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x50, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x40}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1000}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x36c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xfbfc957d39f2d75f}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_KEY_END={0x278, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8a, 0x1, "7c7321ba10e50c85b01f8588e8ca56350ba594aece24f8d9482a906736f262f871b69fe207e25425a186095259ab4ccb75f83f8d06961e8af30a55d4775929d14dea1e3c14e19b5955cae29407d1e28ecf6ce742790593df1c1d6e71bb0152857b3c74e9de49f057fe562bcdd719b597e6bdade99f05c897357889ab37569ead0212839c1965"}, @NFTA_DATA_VALUE={0x87, 0x1, "0b6fa4b24dd3b07e6791665b24425185e260d76a7ad9e969b1607a6263933ea799fd26e4f1dae4a8850a7a753728424e99788b99f1c248a9762408a1574591471868475a4422787be142eb2a624683a5470286abd1709435ef29f49035bef30f8a558c211c6f7c3e2f24132ea80a2a69c79460f6e4776d22cf10b768a7732cc1d1403d"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "8573d4967fd2167c38f1f9419cf5d866945ff93aefa89c63b60015869bccd2af7dbb455d3cbf99bfdb2a0692452c647d0c354509d414e426c9235c2674d5d6794951802b0e169f005a285467ae3eaa4da9c979e0a067408080c3b48c4873a738dfc72cdbcb21ee6217f3fdad436e85ef0dd8b14d6a33b9b60229822c30f69db6da872acefa7fb12cd6d9ddb3ce53b3fbe4cb18f92199c7a05b7533d634e46a3c5dbf0d47f2807209027813393e71765c09166ff1a63bc3537599451a6f9195ccd6aada5a49d8fbbe1c94985b76831ef6cec832c6a176eed74e7573325aae5640f1c5f74ad24527fece1d8844331c3146d63c4d6d51"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "12125f8e24f8a6c6ea6788c91f48d1365753d522831539"}]}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "fa330e784884b8bc9da1a1a2be60685ce883bc662206cd07e5f3c072add806b9e2614078562248d2249d98563df8"}, @NFTA_DATA_VALUE={0x17, 0x1, "0ccd0b163401d92b85476f6c4700129048f448"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}, 0xaa8}}, 0x4000800) socket(0x1d, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000020901080000000000000000000000000800054000000000cfefca4b63665d3897b87775783680f45af80f93c932ed30940610a99e80b4651f0b44dd45f45ecb274471076132f3d223d9fe8deb23e6d452b359ed708810b4804bb2b1978161"], 0x1c}}, 0x0) (async) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8890) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4048054) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000140)={0xaa8, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xa94, 0x3, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "5e4ab72ba2776067f8cc13ac86c2ee5e9cc9a5afc4f2cb806fef3c10e30e53058df6c439f2e501d6943bd2bce95c921578f1f3581ee2611a2c2bb65b379238898f26254cd5d1ba02fa1f7543ca6946d71201d20147af7f4f8b7c36f9327c4ce6502ee514db2686bf1d2dce571f4bea515209217f9e4657fa31d662a913cb"}, @NFTA_DATA_VALUE={0xca, 0x1, "8dee6571e6005dc7a5c1214e274507d41931a1e53ed90866a21f3bf2802351eeb6610c5fd1a054eed0e9ee331ac6943a4e59a6fefe2acf6a0664bff0d01af9ebaa02a70bd7d0b408e8f5a29d48bb92ad061ac8c0c0bcb9d9003091809926124e9ecb828c8d465bdae3c73acc5aace35240b98c7eff96331d5c0a805e24626dbb4f4eb845dec47746e8546b0e52ad6f645a55842de7655b1cf9059627193f2de8f5c5e18536f3e88a3220794a425c815a474d6faacfae190682cd18294ec42e9d09459c221fc8"}]}, @NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "1057986cb8d7cbde6954d3fd717f35a525f29cc3b0750d50a2c238b6e33d7748a56830a1a28c2d06e6b92898ad9d64380a846bd946"}, @NFTA_DATA_VALUE={0xb0, 0x1, "552fd173fba5f1d1906ce8b5fe5d1ea4c7858a1de794fe096e20ca59c5cfeafa015211b57c916684f7fb8aa3ce8eb5a2ad832fdbfb0ae244adb8fab2cccd3c981d7add7f5e7cb143ff0713ada5100d1d82f46cdaf27f4d064d96a4ee96156f150c1937db185fb049ad91df42cb702ef77b3438e68a9f1bb544eb52a45f07b6462cdb3b813e92e4eabf58b023308e5c08c0257e32e723c55dbffeaf18d589c21042c8b162ba9c906982a34941"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}, {0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x25c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "1e453531a59986d1cd67e48a86a41afcd611b53a29e667ecdc025083b1c553a9eeb8df07abce03ce215204131a0f620e7d3dc2e908f3406a6dc3ed97445ccfb86fc65f356289c9850b93658bdf55fc470dd208f0385e08ed3d24be81ea027fb02cb9a348be0f6f863f319e1adf135559091ef7866125c6e583e69ebcba74609819d22ca4c352d3844dafe4861979d7af4967095c3754164f2e3c281eafdd7d2c0989f6ea9d8bacbf73f571ecc3439b49dc963b"}, @NFTA_DATA_VALUE={0x75, 0x1, "80f25d6ef219d664b21a2636591a6564b4c35fb5c09c5e6323f4e030ca8b160908f5dc56748af37a96efeaabb0d5657dccf44bab857be043a2c24bf649290f01e2bc437852f7c52887136ea73e33b2b79c4e15a4c7d28e1d731932a225cf2bf7c003a73bfcb26a9f984a6b1d665eb09144"}, @NFTA_DATA_VALUE={0x5e, 0x1, "90a7e078b549323cd9a5bede5ab5da9ef4b6e91719da673b105f947e042c12cd168e6b26baeda7b0190a9dd3aba9afc116f7cd09434a14847fa3a8b57d74a54d3ee25b51cceeeb6a9122754bd3dac6222646b715013ea4246235"}, @NFTA_DATA_VALUE={0x9, 0x1, "a926f0af99"}, @NFTA_DATA_VALUE={0xb9, 0x1, "311cbe676ec5b97c15756f2f2eafde85d6b08f20489d3781711ed571375f8faab5d716e8fa5092dc677eec5ce2a1566ab2b51e164965c1bada4cb58c01892911835d65d972e7253437a9e12d46b39a72787f9fb5d91e0a8797452a6b3d5769fa05c9985891bdc2f12f33b56cf1bb818c371567633ed1fd10fd24b24d63482eecb29508255f5be563b6d6c36af69c9d238fa7fc55ce0e47e778e63a95bbfa0c429f6783b47cf38dd9fb04ba0579d6fd55556ffc8837"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x42}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x58}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5e, 0x6, 0x1, 0x0, "7bd01e94061eea071fcfbd0cbd9536905b35e84460e82fc00941a811e84fcc6efa938691cc085b533962b538596925958718067540cea9b5747e5c6d536d5f6fd82f3f4c02408040818d5cb168fda98ac82d6ff11948193d8c45"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x50, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x40}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1000}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x36c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xfbfc957d39f2d75f}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_KEY_END={0x278, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8a, 0x1, "7c7321ba10e50c85b01f8588e8ca56350ba594aece24f8d9482a906736f262f871b69fe207e25425a186095259ab4ccb75f83f8d06961e8af30a55d4775929d14dea1e3c14e19b5955cae29407d1e28ecf6ce742790593df1c1d6e71bb0152857b3c74e9de49f057fe562bcdd719b597e6bdade99f05c897357889ab37569ead0212839c1965"}, @NFTA_DATA_VALUE={0x87, 0x1, "0b6fa4b24dd3b07e6791665b24425185e260d76a7ad9e969b1607a6263933ea799fd26e4f1dae4a8850a7a753728424e99788b99f1c248a9762408a1574591471868475a4422787be142eb2a624683a5470286abd1709435ef29f49035bef30f8a558c211c6f7c3e2f24132ea80a2a69c79460f6e4776d22cf10b768a7732cc1d1403d"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "8573d4967fd2167c38f1f9419cf5d866945ff93aefa89c63b60015869bccd2af7dbb455d3cbf99bfdb2a0692452c647d0c354509d414e426c9235c2674d5d6794951802b0e169f005a285467ae3eaa4da9c979e0a067408080c3b48c4873a738dfc72cdbcb21ee6217f3fdad436e85ef0dd8b14d6a33b9b60229822c30f69db6da872acefa7fb12cd6d9ddb3ce53b3fbe4cb18f92199c7a05b7533d634e46a3c5dbf0d47f2807209027813393e71765c09166ff1a63bc3537599451a6f9195ccd6aada5a49d8fbbe1c94985b76831ef6cec832c6a176eed74e7573325aae5640f1c5f74ad24527fece1d8844331c3146d63c4d6d51"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "12125f8e24f8a6c6ea6788c91f48d1365753d522831539"}]}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "fa330e784884b8bc9da1a1a2be60685ce883bc662206cd07e5f3c072add806b9e2614078562248d2249d98563df8"}, @NFTA_DATA_VALUE={0x17, 0x1, "0ccd0b163401d92b85476f6c4700129048f448"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}, 0xaa8}}, 0x4000800) (async) 23:03:54 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x599, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:54 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4011) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24008084) socket(0x1d, 0x3, 0x1) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8054) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa27}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x2000a840) 23:03:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_fd={0x6f, 0x2, 0x4, 0x70000, 0x2, {}, {0x3, 0xc, 0x80, 0x7f, 0x7, 0x40, "c76e82b2"}, 0x7a, 0x4, {&(0x7f0000000080)=[{0xffffffe1, 0x8000, {}, 0x80000001}, {0x8, 0xffffffff, {}, 0x4c65}]}, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x599, 0x1, 0x1}) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (rerun: 32) 23:03:54 executing program 0: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @local}}) 23:03:54 executing program 5: r0 = socket(0x1d, 0x3, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000020901080000000000000000000000000800054000000000cfefca4b63665d3897b87775783680f45af80f93c932ed30940610a99e80b4651f0b44dd45f45ecb274471076132f3d223d9fe8deb23e6d452b359ed708810b4804bb2b1978161"], 0x1c}}, 0x0) (async) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8890) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4048054) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000140)={0xaa8, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xa94, 0x3, 0x0, 0x1, [{0x308, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "5e4ab72ba2776067f8cc13ac86c2ee5e9cc9a5afc4f2cb806fef3c10e30e53058df6c439f2e501d6943bd2bce95c921578f1f3581ee2611a2c2bb65b379238898f26254cd5d1ba02fa1f7543ca6946d71201d20147af7f4f8b7c36f9327c4ce6502ee514db2686bf1d2dce571f4bea515209217f9e4657fa31d662a913cb"}, @NFTA_DATA_VALUE={0xca, 0x1, "8dee6571e6005dc7a5c1214e274507d41931a1e53ed90866a21f3bf2802351eeb6610c5fd1a054eed0e9ee331ac6943a4e59a6fefe2acf6a0664bff0d01af9ebaa02a70bd7d0b408e8f5a29d48bb92ad061ac8c0c0bcb9d9003091809926124e9ecb828c8d465bdae3c73acc5aace35240b98c7eff96331d5c0a805e24626dbb4f4eb845dec47746e8546b0e52ad6f645a55842de7655b1cf9059627193f2de8f5c5e18536f3e88a3220794a425c815a474d6faacfae190682cd18294ec42e9d09459c221fc8"}]}, @NFTA_SET_ELEM_KEY_END={0xf0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "1057986cb8d7cbde6954d3fd717f35a525f29cc3b0750d50a2c238b6e33d7748a56830a1a28c2d06e6b92898ad9d64380a846bd946"}, @NFTA_DATA_VALUE={0xb0, 0x1, "552fd173fba5f1d1906ce8b5fe5d1ea4c7858a1de794fe096e20ca59c5cfeafa015211b57c916684f7fb8aa3ce8eb5a2ad832fdbfb0ae244adb8fab2cccd3c981d7add7f5e7cb143ff0713ada5100d1d82f46cdaf27f4d064d96a4ee96156f150c1937db185fb049ad91df42cb702ef77b3438e68a9f1bb544eb52a45f07b6462cdb3b813e92e4eabf58b023308e5c08c0257e32e723c55dbffeaf18d589c21042c8b162ba9c906982a34941"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}, {0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x25c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb7, 0x1, "1e453531a59986d1cd67e48a86a41afcd611b53a29e667ecdc025083b1c553a9eeb8df07abce03ce215204131a0f620e7d3dc2e908f3406a6dc3ed97445ccfb86fc65f356289c9850b93658bdf55fc470dd208f0385e08ed3d24be81ea027fb02cb9a348be0f6f863f319e1adf135559091ef7866125c6e583e69ebcba74609819d22ca4c352d3844dafe4861979d7af4967095c3754164f2e3c281eafdd7d2c0989f6ea9d8bacbf73f571ecc3439b49dc963b"}, @NFTA_DATA_VALUE={0x75, 0x1, "80f25d6ef219d664b21a2636591a6564b4c35fb5c09c5e6323f4e030ca8b160908f5dc56748af37a96efeaabb0d5657dccf44bab857be043a2c24bf649290f01e2bc437852f7c52887136ea73e33b2b79c4e15a4c7d28e1d731932a225cf2bf7c003a73bfcb26a9f984a6b1d665eb09144"}, @NFTA_DATA_VALUE={0x5e, 0x1, "90a7e078b549323cd9a5bede5ab5da9ef4b6e91719da673b105f947e042c12cd168e6b26baeda7b0190a9dd3aba9afc116f7cd09434a14847fa3a8b57d74a54d3ee25b51cceeeb6a9122754bd3dac6222646b715013ea4246235"}, @NFTA_DATA_VALUE={0x9, 0x1, "a926f0af99"}, @NFTA_DATA_VALUE={0xb9, 0x1, "311cbe676ec5b97c15756f2f2eafde85d6b08f20489d3781711ed571375f8faab5d716e8fa5092dc677eec5ce2a1566ab2b51e164965c1bada4cb58c01892911835d65d972e7253437a9e12d46b39a72787f9fb5d91e0a8797452a6b3d5769fa05c9985891bdc2f12f33b56cf1bb818c371567633ed1fd10fd24b24d63482eecb29508255f5be563b6d6c36af69c9d238fa7fc55ce0e47e778e63a95bbfa0c429f6783b47cf38dd9fb04ba0579d6fd55556ffc8837"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x42}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x58}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x5e, 0x6, 0x1, 0x0, "7bd01e94061eea071fcfbd0cbd9536905b35e84460e82fc00941a811e84fcc6efa938691cc085b533962b538596925958718067540cea9b5747e5c6d536d5f6fd82f3f4c02408040818d5cb168fda98ac82d6ff11948193d8c45"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0xc4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, {0x50, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x40}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1000}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x36c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xfbfc957d39f2d75f}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_KEY_END={0x278, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8a, 0x1, "7c7321ba10e50c85b01f8588e8ca56350ba594aece24f8d9482a906736f262f871b69fe207e25425a186095259ab4ccb75f83f8d06961e8af30a55d4775929d14dea1e3c14e19b5955cae29407d1e28ecf6ce742790593df1c1d6e71bb0152857b3c74e9de49f057fe562bcdd719b597e6bdade99f05c897357889ab37569ead0212839c1965"}, @NFTA_DATA_VALUE={0x87, 0x1, "0b6fa4b24dd3b07e6791665b24425185e260d76a7ad9e969b1607a6263933ea799fd26e4f1dae4a8850a7a753728424e99788b99f1c248a9762408a1574591471868475a4422787be142eb2a624683a5470286abd1709435ef29f49035bef30f8a558c211c6f7c3e2f24132ea80a2a69c79460f6e4776d22cf10b768a7732cc1d1403d"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "8573d4967fd2167c38f1f9419cf5d866945ff93aefa89c63b60015869bccd2af7dbb455d3cbf99bfdb2a0692452c647d0c354509d414e426c9235c2674d5d6794951802b0e169f005a285467ae3eaa4da9c979e0a067408080c3b48c4873a738dfc72cdbcb21ee6217f3fdad436e85ef0dd8b14d6a33b9b60229822c30f69db6da872acefa7fb12cd6d9ddb3ce53b3fbe4cb18f92199c7a05b7533d634e46a3c5dbf0d47f2807209027813393e71765c09166ff1a63bc3537599451a6f9195ccd6aada5a49d8fbbe1c94985b76831ef6cec832c6a176eed74e7573325aae5640f1c5f74ad24527fece1d8844331c3146d63c4d6d51"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "12125f8e24f8a6c6ea6788c91f48d1365753d522831539"}]}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x32, 0x1, "fa330e784884b8bc9da1a1a2be60685ce883bc662206cd07e5f3c072add806b9e2614078562248d2249d98563df8"}, @NFTA_DATA_VALUE={0x17, 0x1, "0ccd0b163401d92b85476f6c4700129048f448"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}, 0xaa8}}, 0x4000800) 23:03:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_fd={0x6f, 0x2, 0x4, 0x70000, 0x2, {}, {0x3, 0xc, 0x80, 0x7f, 0x7, 0x40, "c76e82b2"}, 0x7a, 0x4, {&(0x7f0000000080)=[{0xffffffe1, 0x8000, {}, 0x80000001}, {0x8, 0xffffffff, {}, 0x4c65}]}, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:54 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x4011) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24008084) (async) socket(0x1d, 0x3, 0x1) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8054) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa27}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x2000a840) 23:03:54 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 23:03:54 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000080)) 23:03:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x10000000, 0x8a93, 0x0, {0x0, @sdr={0x3631564e, 0x2}}, 0x3ff}) 23:03:54 executing program 5: r0 = socket(0x1d, 0x3, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x810, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x200000c1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r3}, 0x14) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r3, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030d26bd7000fcdbdf25000000000610060001fa000800010032eefda2efb0f2b9d3b857bf7a78333c7a52fd2eaeb40497c1982d1a5655d50af8da7044dcabdc75f29b6f873df5e4baffcc11d046361d5a601f4e973ea588950ab8c5e000000f0006000000", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r4) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc5}, 0x8004) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14010000800a010300000000000000000c000006"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040000) 23:03:54 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044001}, 0x20008000) 23:03:54 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 23:03:54 executing program 0: r0 = socket(0x23, 0xa3a6d62338f732f9, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x7}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000040605000200000000000000000000030500010007000000050001000700000005dd0100070000000500010007000000350a80f3cef28d44ea8e704e42424eef97b7d4917cf7730a5879a54146cf645b1b0b8b79ba9cdb639f010908f22464344af2f20da87877358b2fdf14ef4116b51d378704ed0ffef52b"], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0xd37802) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r2}, 0x14) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r2, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) 23:03:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000600)=""/87, 0x1a, 0x57}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000480)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r2}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x3, 0x6, 0xb, 0x8, 0x10, 0xfffffffffffffff0}, @exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5f72}], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1c, r5, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x0, 0x14}, 0x10, 0x1e74f, r2, 0x0, &(0x7f0000000740)=[r2]}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x7, 0x2, 0x4, 0x10, 0x0, {0x0, 0x2710}, {0x3, 0x0, 0x0, 0x7f, 0xad, 0xf9, "1ae5b614"}, 0x1, 0x2, {&(0x7f0000000340)=[{0x0, 0xbc, {&(0x7f00000002c0)}, 0x8001}, {0x7f, 0x9, {&(0x7f0000000300)}, 0x3ff}]}, 0xffff}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000000c0)=[@increfs={0x40046304, 0x2}, @acquire_done={0x40106309, 0x2}, @clear_death={0x400c630f, 0x2}], 0x24, 0x0, &(0x7f0000000100)="607bf0d43eb6502fccc5a2017619893b15db9ef54412bdf382fcdfe444552ba5dadceb05"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000800)=0x2) 23:03:54 executing program 5: r0 = socket(0x1d, 0x3, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x810, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x200000c1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r3}, 0x14) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r3, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030d26bd7000fcdbdf25000000000610060001fa000800010032eefda2efb0f2b9d3b857bf7a78333c7a52fd2eaeb40497c1982d1a5655d50af8da7044dcabdc75f29b6f873df5e4baffcc11d046361d5a601f4e973ea588950ab8c5e000000f0006000000", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r4) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc5}, 0x8004) (async) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14010000800a010300000000000000000c000006"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040000) 23:03:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x10000000, 0x8a93, 0x0, {0x0, @sdr={0x3631564e, 0x2}}, 0x3ff}) 23:03:54 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 23:03:54 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) (async) r0 = socket(0x1d, 0x3, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async, rerun: 32) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async, rerun: 64) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) (async, rerun: 64) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) (async) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044001}, 0x20008000) 23:03:54 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044001}, 0x20008000) 23:03:54 executing program 3: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 23:03:54 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044001}, 0x20008000) 23:03:54 executing program 3: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 23:03:54 executing program 5: r0 = socket(0x1d, 0x3, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x810, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x200000c1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r3}, 0x14) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r3, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030d26bd7000fcdbdf25000000000610060001fa000800010032eefda2efb0f2b9d3b857bf7a78333c7a52fd2eaeb40497c1982d1a5655d50af8da7044dcabdc75f29b6f873df5e4baffcc11d046361d5a601f4e973ea588950ab8c5e000000f0006000000", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r4) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc5}, 0x8004) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14010000800a010300000000000000000c000006"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040000) socket(0x1d, 0x3, 0x1) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x810, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x200000c1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r3}, 0x14) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r3, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) (async) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030d26bd7000fcdbdf25000000000610060001fa000800010032eefda2efb0f2b9d3b857bf7a78333c7a52fd2eaeb40497c1982d1a5655d50af8da7044dcabdc75f29b6f873df5e4baffcc11d046361d5a601f4e973ea588950ab8c5e000000f0006000000", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r4) (async) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r6, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc5}, 0x8004) (async) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14010000800a010300000000000000000c000006"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040000) (async) 23:03:54 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044001}, 0x20008000) 23:03:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000600)=""/87, 0x1a, 0x57}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000480)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r2}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x3, 0x6, 0xb, 0x8, 0x10, 0xfffffffffffffff0}, @exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5f72}], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1c, r5, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x0, 0x14}, 0x10, 0x1e74f, r2, 0x0, &(0x7f0000000740)=[r2]}, 0x80) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x7, 0x2, 0x4, 0x10, 0x0, {0x0, 0x2710}, {0x3, 0x0, 0x0, 0x7f, 0xad, 0xf9, "1ae5b614"}, 0x1, 0x2, {&(0x7f0000000340)=[{0x0, 0xbc, {&(0x7f00000002c0)}, 0x8001}, {0x7f, 0x9, {&(0x7f0000000300)}, 0x3ff}]}, 0xffff}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000000c0)=[@increfs={0x40046304, 0x2}, @acquire_done={0x40106309, 0x2}, @clear_death={0x400c630f, 0x2}], 0x24, 0x0, &(0x7f0000000100)="607bf0d43eb6502fccc5a2017619893b15db9ef54412bdf382fcdfe444552ba5dadceb05"}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000800)=0x2) 23:03:54 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044001}, 0x20008000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) (async) socket(0x1d, 0x3, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) (async) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) (async) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) (async) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x80, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x4044001}, 0x20008000) (async) 23:03:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x10000000, 0x8a93, 0x0, {0x0, @sdr={0x3631564e, 0x2}}, 0x3ff}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x10000000, 0x8a93, 0x0, {0x0, @sdr={0x3631564e, 0x2}}, 0x3ff}) (async) 23:03:54 executing program 3: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 23:03:54 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000600)=""/87, 0x1a, 0x57}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000480)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r2}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x3, 0x6, 0xb, 0x8, 0x10, 0xfffffffffffffff0}, @exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5f72}], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1c, r5, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x0, 0x14}, 0x10, 0x1e74f, r2, 0x0, &(0x7f0000000740)=[r2]}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x7, 0x2, 0x4, 0x10, 0x0, {0x0, 0x2710}, {0x3, 0x0, 0x0, 0x7f, 0xad, 0xf9, "1ae5b614"}, 0x1, 0x2, {&(0x7f0000000340)=[{0x0, 0xbc, {&(0x7f00000002c0)}, 0x8001}, {0x7f, 0x9, {&(0x7f0000000300)}, 0x3ff}]}, 0xffff}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000000c0)=[@increfs={0x40046304, 0x2}, @acquire_done={0x40106309, 0x2}, @clear_death={0x400c630f, 0x2}], 0x24, 0x0, &(0x7f0000000100)="607bf0d43eb6502fccc5a2017619893b15db9ef54412bdf382fcdfe444552ba5dadceb05"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000800)=0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000600)=""/87, 0x1a, 0x57}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000480)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, r2}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x2, 0x3, 0x6, 0xb, 0x8, 0x10, 0xfffffffffffffff0}, @exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5f72}], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1c, r5, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x0, 0x14}, 0x10, 0x1e74f, r2, 0x0, &(0x7f0000000740)=[r2]}, 0x80) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)=@multiplanar_userptr={0x7, 0x2, 0x4, 0x10, 0x0, {0x0, 0x2710}, {0x3, 0x0, 0x0, 0x7f, 0xad, 0xf9, "1ae5b614"}, 0x1, 0x2, {&(0x7f0000000340)=[{0x0, 0xbc, {&(0x7f00000002c0)}, 0x8001}, {0x7f, 0x9, {&(0x7f0000000300)}, 0x3ff}]}, 0xffff}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000000c0)=[@increfs={0x40046304, 0x2}, @acquire_done={0x40106309, 0x2}, @clear_death={0x400c630f, 0x2}], 0x24, 0x0, &(0x7f0000000100)="607bf0d43eb6502fccc5a2017619893b15db9ef54412bdf382fcdfe444552ba5dadceb05"}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000800)=0x2) (async) 23:03:54 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 23:03:54 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0xffff, 0x1, 0x4, 0x4, 0x4, {0x0, 0x2710}, {0x2, 0x1, 0x8, 0x0, 0x7, 0x1, "9021fc9f"}, 0x1, 0x2, {&(0x7f0000000200)=[{0x3f, 0x9, {&(0x7f0000000180)}, 0x1f}, {0x6, 0x3, {&(0x7f00000001c0)}, 0x8}]}, 0x4}) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x42115}, 0x4008040) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:03:54 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 23:03:54 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) 23:03:54 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x1d, 0x3, 0x1) 23:03:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000000cc, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:54 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0xffff, 0x1, 0x4, 0x4, 0x4, {0x0, 0x2710}, {0x2, 0x1, 0x8, 0x0, 0x7, 0x1, "9021fc9f"}, 0x1, 0x2, {&(0x7f0000000200)=[{0x3f, 0x9, {&(0x7f0000000180)}, 0x1f}, {0x6, 0x3, {&(0x7f00000001c0)}, 0x8}]}, 0x4}) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x42115}, 0x4008040) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0xffff, 0x1, 0x4, 0x4, 0x4, {0x0, 0x2710}, {0x2, 0x1, 0x8, 0x0, 0x7, 0x1, "9021fc9f"}, 0x1, 0x2, {&(0x7f0000000200)=[{0x3f, 0x9, {&(0x7f0000000180)}, 0x1f}, {0x6, 0x3, {&(0x7f00000001c0)}, 0x8}]}, 0x4}) (async) socket(0x1d, 0x3, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) (async) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x42115}, 0x4008040) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) 23:03:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000200)={r0, 0x401, 0x3, "9da1014d78f3c7423165ffb71a615ba54c887ff0a802b52699c62437f75deaaed87d0d5063c0f42eb06d6e70aa63a832c09ac001fbee656b6e16cf8409feab946c59b4b3ffd0c47f2ca7ae5ef2698c639288df2750"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0]}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x48000) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:54 executing program 3: r0 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) connect$nfc_raw(r0, 0x0, 0x0) 23:03:54 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) 23:03:54 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket(0x1d, 0x3, 0x1) 23:03:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000000cc, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000000cc, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000200)={r0, 0x401, 0x3, "9da1014d78f3c7423165ffb71a615ba54c887ff0a802b52699c62437f75deaaed87d0d5063c0f42eb06d6e70aa63a832c09ac001fbee656b6e16cf8409feab946c59b4b3ffd0c47f2ca7ae5ef2698c639288df2750"}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0]}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x48000) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:54 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) 23:03:54 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 23:03:54 executing program 5: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0xffff, 0x1, 0x4, 0x4, 0x4, {0x0, 0x2710}, {0x2, 0x1, 0x8, 0x0, 0x7, 0x1, "9021fc9f"}, 0x1, 0x2, {&(0x7f0000000200)=[{0x3f, 0x9, {&(0x7f0000000180)}, 0x1f}, {0x6, 0x3, {&(0x7f00000001c0)}, 0x8}]}, 0x4}) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x42115}, 0x4008040) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000280)=@multiplanar_userptr={0xffff, 0x1, 0x4, 0x4, 0x4, {0x0, 0x2710}, {0x2, 0x1, 0x8, 0x0, 0x7, 0x1, "9021fc9f"}, 0x1, 0x2, {&(0x7f0000000200)=[{0x3f, 0x9, {&(0x7f0000000180)}, 0x1f}, {0x6, 0x3, {&(0x7f00000001c0)}, 0x8}]}, 0x4}) (async) socket(0x1d, 0x3, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) (async) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffe}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x42115}, 0x4008040) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) 23:03:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000200)={r0, 0x401, 0x3, "9da1014d78f3c7423165ffb71a615ba54c887ff0a802b52699c62437f75deaaed87d0d5063c0f42eb06d6e70aa63a832c09ac001fbee656b6e16cf8409feab946c59b4b3ffd0c47f2ca7ae5ef2698c639288df2750"}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0]}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x48000) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r6) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000200)={r0, 0x401, 0x3, "9da1014d78f3c7423165ffb71a615ba54c887ff0a802b52699c62437f75deaaed87d0d5063c0f42eb06d6e70aa63a832c09ac001fbee656b6e16cf8409feab946c59b4b3ffd0c47f2ca7ae5ef2698c639288df2750"}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0]}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x48000) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r6) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000000cc, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:54 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket(0x1d, 0x3, 0x1) 23:03:54 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:03:54 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 23:03:54 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c0000200108010100000000000000000a0000052400048008000b4000000008080007400000000508004140000000040800034000007fff060002400008000014000480080009400000000808000440000000bb1c00048008000240000000010800024000000000080002400000800105000300000000000900010073797a3000000000050003003a000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4008000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000100)={@any, 0x1f, 0x8, 0x7, 0x4, 0x2, "bdbdd84a2de8165d103534e6a50e9f9a5244bbe6b208ab554d2a9d5c166c99f59988d3aae8b2dd121a8a35080bfd5f440b4c8415628b5d96aca888e3924a270c829d5bd51bca13aa7c519b66905c09c54ed58ea3fb393a94e1e49f821dfe4cdb9c40a40937a1d223899955ad4e624fafd61c2ada58321e67e54cd56eadb2010f"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) 23:03:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0xffffffff80000000, 0x644801) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)=@multiplanar_fd={0x8c5d, 0x0, 0x4, 0x4, 0x10001, {0x0, 0xea60}, {0x2, 0x2, 0x5, 0x3f, 0x1, 0x1, "06940253"}, 0xffffffff, 0x4, {&(0x7f0000000040)=[{0xff, 0x0, {r1}, 0x9}, {0xc4, 0x4, {}, 0x10001}]}, 0x1}) 23:03:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modules_conf_t:s0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x851}, 0x48080) r2 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008801) 23:03:55 executing program 3: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 23:03:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c0000200108010100000000000000000a0000052400048008000b4000000008080007400000000508004140000000040800034000007fff060002400008000014000480080009400000000808000440000000bb1c00048008000240000000010800024000000000080002400000800105000300000000000900010073797a3000000000050003003a000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4008000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000100)={@any, 0x1f, 0x8, 0x7, 0x4, 0x2, "bdbdd84a2de8165d103534e6a50e9f9a5244bbe6b208ab554d2a9d5c166c99f59988d3aae8b2dd121a8a35080bfd5f440b4c8415628b5d96aca888e3924a270c829d5bd51bca13aa7c519b66905c09c54ed58ea3fb393a94e1e49f821dfe4cdb9c40a40937a1d223899955ad4e624fafd61c2ada58321e67e54cd56eadb2010f"}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) 23:03:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0xffffffff80000000, 0x644801) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modules_conf_t:s0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x851}, 0x48080) (async) r2 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008801) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)=@multiplanar_fd={0x8c5d, 0x0, 0x4, 0x4, 0x10001, {0x0, 0xea60}, {0x2, 0x2, 0x5, 0x3f, 0x1, 0x1, "06940253"}, 0xffffffff, 0x4, {&(0x7f0000000040)=[{0xff, 0x0, {r1}, 0x9}, {0xc4, 0x4, {}, 0x10001}]}, 0x1}) (rerun: 32) 23:03:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$audion(&(0x7f00000000c0), 0xffffffff80000000, 0x644801) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$audion(&(0x7f00000000c0), 0xffffffff80000000, 0x644801) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modules_conf_t:s0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x851}, 0x48080) r2 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008801) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_virt_wifi\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:modules_conf_t:s0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x851}, 0x48080) (async) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008801) (async) 23:03:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c0000200108010100000000000000000a0000052400048008000b4000000008080007400000000508004140000000040800034000007fff060002400008000014000480080009400000000808000440000000bb1c00048008000240000000010800024000000000080002400000800105000300000000000900010073797a3000000000050003003a000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4008000) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000100)={@any, 0x1f, 0x8, 0x7, 0x4, 0x2, "bdbdd84a2de8165d103534e6a50e9f9a5244bbe6b208ab554d2a9d5c166c99f59988d3aae8b2dd121a8a35080bfd5f440b4c8415628b5d96aca888e3924a270c829d5bd51bca13aa7c519b66905c09c54ed58ea3fb393a94e1e49f821dfe4cdb9c40a40937a1d223899955ad4e624fafd61c2ada58321e67e54cd56eadb2010f"}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x4000000) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) 23:03:55 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)=@multiplanar_fd={0x8c5d, 0x0, 0x4, 0x4, 0x10001, {0x0, 0xea60}, {0x2, 0x2, 0x5, 0x3f, 0x1, 0x1, "06940253"}, 0xffffffff, 0x4, {&(0x7f0000000040)=[{0xff, 0x0, {r1}, 0x9}, {0xc4, 0x4, {}, 0x10001}]}, 0x1}) 23:03:55 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x40}, [@generic={0x9, 0x5, 0x6, 0x100, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @alu={0x7, 0x1, 0x9, 0x5, 0x7, 0x18, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x4}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0xd2, &(0x7f00000001c0)=""/210, 0x41000, 0x1f, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xb, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x1]}, 0x80) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x5, 0x1737, 0x4, {0x3, @sdr={0x20303159, 0x4}}, 0x3}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x29d3, 0x1, 0x4, 0x2, 0x3, {0x77359400}, {0x3, 0x2, 0x4, 0x0, 0xf4, 0x1, "6d1febd3"}, 0x5, 0x3, {&(0x7f0000000080)=[{0xeeb, 0x2, {0x96d}, 0x9}, {0x5, 0x80000000, {0x1}, 0x8}]}, 0x5, 0x0, r2}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r3}, 0x14) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r3, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030d26bd7000fedbdf25000000000600060001000000080002000000000008000100", @ANYRES32=r5, @ANYBLOB="7bac2256fcfe5100396ce7cf446097f5d5de4222d34040a07318"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r4) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r7) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x4, {0x3, @pix_mp={0x4, 0x8, 0x32314d54, 0x8, 0x7, [{0x8000, 0xfffffff7}, {0x9, 0x2}, {0x6, 0x7}, {0x3, 0x803}, {0x7, 0xcf8}, {0xffff0607, 0x1}, {0x6, 0x9}, {0x9, 0x40}], 0xd9, 0x8, 0x3, 0x1, 0x5}}, 0x8}) 23:03:55 executing program 5: r0 = socket(0x25, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:55 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x40}, [@generic={0x9, 0x5, 0x6, 0x100, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @alu={0x7, 0x1, 0x9, 0x5, 0x7, 0x18, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x4}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0xd2, &(0x7f00000001c0)=""/210, 0x41000, 0x1f, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xb, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x1]}, 0x80) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) 23:03:55 executing program 4: r0 = socket(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) socket$pppoe(0x18, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x40) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) 23:03:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x5, 0x1737, 0x4, {0x3, @sdr={0x20303159, 0x4}}, 0x3}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x29d3, 0x1, 0x4, 0x2, 0x3, {0x77359400}, {0x3, 0x2, 0x4, 0x0, 0xf4, 0x1, "6d1febd3"}, 0x5, 0x3, {&(0x7f0000000080)=[{0xeeb, 0x2, {0x96d}, 0x9}, {0x5, 0x80000000, {0x1}, 0x8}]}, 0x5, 0x0, r2}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r3}, 0x14) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r3, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030d26bd7000fedbdf25000000000600060001000000080002000000000008000100", @ANYRES32=r5, @ANYBLOB="7bac2256fcfe5100396ce7cf446097f5d5de4222d34040a07318"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r4) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r7) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x4, {0x3, @pix_mp={0x4, 0x8, 0x32314d54, 0x8, 0x7, [{0x8000, 0xfffffff7}, {0x9, 0x2}, {0x6, 0x7}, {0x3, 0x803}, {0x7, 0xcf8}, {0xffff0607, 0x1}, {0x6, 0x9}, {0x9, 0x40}], 0xd9, 0x8, 0x3, 0x1, 0x5}}, 0x8}) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 5: r0 = socket(0x25, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:55 executing program 4: r0 = socket(0x1d, 0x3, 0x1) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x40) (async) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) (async) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x40}, [@generic={0x9, 0x5, 0x6, 0x100, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @alu={0x7, 0x1, 0x9, 0x5, 0x7, 0x18, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x4}, @exit]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0xd2, &(0x7f00000001c0)=""/210, 0x41000, 0x1f, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xb, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x1]}, 0x80) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:55 executing program 5: r0 = socket(0x25, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000001c0)={0x5, 0x1737, 0x4, {0x3, @sdr={0x20303159, 0x4}}, 0x3}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x29d3, 0x1, 0x4, 0x2, 0x3, {0x77359400}, {0x3, 0x2, 0x4, 0x0, 0xf4, 0x1, "6d1febd3"}, 0x5, 0x3, {&(0x7f0000000080)=[{0xeeb, 0x2, {0x96d}, 0x9}, {0x5, 0x80000000, {0x1}, 0x8}]}, 0x5, 0x0, r2}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r3}, 0x14) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r3, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030d26bd7000fedbdf25000000000600060001000000080002000000000008000100", @ANYRES32=r5, @ANYBLOB="7bac2256fcfe5100396ce7cf446097f5d5de4222d34040a07318"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r4) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r6, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8010) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r7) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x4, {0x3, @pix_mp={0x4, 0x8, 0x32314d54, 0x8, 0x7, [{0x8000, 0xfffffff7}, {0x9, 0x2}, {0x6, 0x7}, {0x3, 0x803}, {0x7, 0xcf8}, {0xffff0607, 0x1}, {0x6, 0x9}, {0x9, 0x40}], 0xd9, 0x8, 0x3, 0x1, 0x5}}, 0x8}) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) 23:03:55 executing program 4: r0 = socket(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) socket$pppoe(0x18, 0x1, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x40) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) socket(0x1d, 0x3, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x40) (async) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) (async) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) (async) 23:03:55 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x2, "d708"}, 0x3) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:03:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x9, 0x1, 0x3, 0x0, 0x40}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x16da00) write$6lowpan_control(r2, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 23:03:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@userptr={0xffffffff, 0x2, 0x4, 0x2000, 0x9, {r1, r2/1000+60000}, {0x1, 0x0, 0x5, 0x0, 0x9, 0x8, "4a170d24"}, 0x800, 0x2, {&(0x7f0000000100)}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x5, 0x0, 0x4, 0x100, 0x0, {0x0, 0x2710}, {0x4, 0x1, 0xb5, 0x0, 0x2, 0x2, "f22b2509"}, 0xffffffff, 0x2, {&(0x7f0000000240)=[{0x155e, 0x6, {&(0x7f00000001c0)}, 0x15}, {0xe6, 0x4c6000, {&(0x7f0000000200)}, 0x10001}]}, 0x114}) 23:03:55 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x2, "d708"}, 0x3) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:55 executing program 4: socket(0xb, 0xa, 0x10000001) 23:03:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@userptr={0xffffffff, 0x2, 0x4, 0x2000, 0x9, {r1, r2/1000+60000}, {0x1, 0x0, 0x5, 0x0, 0x9, 0x8, "4a170d24"}, 0x800, 0x2, {&(0x7f0000000100)}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x5, 0x0, 0x4, 0x100, 0x0, {0x0, 0x2710}, {0x4, 0x1, 0xb5, 0x0, 0x2, 0x2, "f22b2509"}, 0xffffffff, 0x2, {&(0x7f0000000240)=[{0x155e, 0x6, {&(0x7f00000001c0)}, 0x15}, {0xe6, 0x4c6000, {&(0x7f0000000200)}, 0x10001}]}, 0x114}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@userptr={0xffffffff, 0x2, 0x4, 0x2000, 0x9, {r1, r2/1000+60000}, {0x1, 0x0, 0x5, 0x0, 0x9, 0x8, "4a170d24"}, 0x800, 0x2, {&(0x7f0000000100)}, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x5, 0x0, 0x4, 0x100, 0x0, {0x0, 0x2710}, {0x4, 0x1, 0xb5, 0x0, 0x2, 0x2, "f22b2509"}, 0xffffffff, 0x2, {&(0x7f0000000240)=[{0x155e, 0x6, {&(0x7f00000001c0)}, 0x15}, {0xe6, 0x4c6000, {&(0x7f0000000200)}, 0x10001}]}, 0x114}) (async) 23:03:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x9, 0x1, 0x3, 0x0, 0x40}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x16da00) write$6lowpan_control(r2, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:11 2', 0x1b) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x9, 0x1, 0x3, 0x0, 0x40}) (async) syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x16da00) (async) write$6lowpan_control(r2, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:11 2', 0x1b) (async) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 4: socket(0xb, 0xa, 0x10000001) socket(0xb, 0xa, 0x10000001) (async) 23:03:55 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)={0x2, "d708"}, 0x3) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:55 executing program 4: socket(0xb, 0xa, 0x10000001) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@userptr={0xffffffff, 0x2, 0x4, 0x2000, 0x9, {r1, r2/1000+60000}, {0x1, 0x0, 0x5, 0x0, 0x9, 0x8, "4a170d24"}, 0x800, 0x2, {&(0x7f0000000100)}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000002c0)=@multiplanar_userptr={0x5, 0x0, 0x4, 0x100, 0x0, {0x0, 0x2710}, {0x4, 0x1, 0xb5, 0x0, 0x2, 0x2, "f22b2509"}, 0xffffffff, 0x2, {&(0x7f0000000240)=[{0x155e, 0x6, {&(0x7f00000001c0)}, 0x15}, {0xe6, 0x4c6000, {&(0x7f0000000200)}, 0x10001}]}, 0x114}) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x9, 0x1, 0x3, 0x0, 0x40}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x16da00) write$6lowpan_control(r2, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 23:03:55 executing program 4: ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x1, 0xf85, 0x8, @multicast, 'bridge0\x00'}) socket(0x1d, 0x3, 0x1) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 1: openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0), 0x200243, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000240)={0x0, 0xdea, 0x5, 0x7, 0x3ff, 0x2, 0x7, 0xffff, 0x6, 0x9, 0x10001, 0x20}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="20002cbd7000ffdbdf250100000008100100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004901) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x2, 0x4, 0x70000, 0x400, {}, {0x5, 0x2, 0xff, 0x8, 0x3, 0x9, "ce98c689"}, 0x10001, 0x1, {&(0x7f0000000140)=[{0x1, 0x8, {0x3f}, 0x7fff}, {0x4, 0xfffffff7, {0x7e}, 0x1b39}]}, 0x5}) 23:03:55 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2d}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x13ca}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 4: ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x1, 0xf85, 0x8, @multicast, 'bridge0\x00'}) socket(0x1d, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x1, 0xf85, 0x8, @multicast, 'bridge0\x00'}) (async) socket(0x1d, 0x3, 0x1) (async) 23:03:55 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r0}, 0x14) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r0, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030d26bd7000fedbdf25000000000600060001000000080002000000000008000100", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x3f, 0x6000, 0x3, @empty, @dev={0xfe, 0x80, '\x00', 0x14}, 0x700, 0x0, 0xd67, 0x6}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x58}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x287}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:55 executing program 1: openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0), 0x200243, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000240)={0x0, 0xdea, 0x5, 0x7, 0x3ff, 0x2, 0x7, 0xffff, 0x6, 0x9, 0x10001, 0x20}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="20002cbd7000ffdbdf250100000008100100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004901) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x2, 0x4, 0x70000, 0x400, {}, {0x5, 0x2, 0xff, 0x8, 0x3, 0x9, "ce98c689"}, 0x10001, 0x1, {&(0x7f0000000140)=[{0x1, 0x8, {0x3f}, 0x7fff}, {0x4, 0xfffffff7, {0x7e}, 0x1b39}]}, 0x5}) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2d}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x13ca}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 23:03:55 executing program 4: ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x1, 0xf85, 0x8, @multicast, 'bridge0\x00'}) socket(0x1d, 0x3, 0x1) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r0}, 0x14) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r0, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030d26bd7000fedbdf25000000000600060001000000080002000000000008000100", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x3f, 0x6000, 0x3, @empty, @dev={0xfe, 0x80, '\x00', 0x14}, 0x700, 0x0, 0xd67, 0x6}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x58}}, 0x0) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x287}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) (async) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 1: openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0), 0x200243, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000240)={0x0, 0xdea, 0x5, 0x7, 0x3ff, 0x2, 0x7, 0xffff, 0x6, 0x9, 0x10001, 0x20}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="20002cbd7000ffdbdf250100000008100100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004901) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x2, 0x4, 0x70000, 0x400, {}, {0x5, 0x2, 0xff, 0x8, 0x3, 0x9, "ce98c689"}, 0x10001, 0x1, {&(0x7f0000000140)=[{0x1, 0x8, {0x3f}, 0x7fff}, {0x4, 0xfffffff7, {0x7e}, 0x1b39}]}, 0x5}) 23:03:55 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2d}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x13ca}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 4: r0 = socket(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @remote, 'veth0_to_team\x00'}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x823c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 23:03:55 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r0}, 0x14) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r0, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) (rerun: 64) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async, rerun: 32) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="030d26bd7000fedbdf25000000000600060001000000080002000000000008000100", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x3f, 0x6000, 0x3, @empty, @dev={0xfe, 0x80, '\x00', 0x14}, 0x700, 0x0, 0xd67, 0x6}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x58}}, 0x0) (async, rerun: 64) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async, rerun: 64) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x287}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) (async) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x0, 0x59455247, 0x6, 0xc, [{0x5c}, {0x4, 0x9}, {0x28c, 0x4}, {0x4c77, 0x3}, {0xf3, 0x6}, {0x20, 0x7}, {0x4, 0x3}, {0x8000}], 0x5, 0x1, 0x3, 0x2, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 23:03:55 executing program 4: r0 = socket(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @remote, 'veth0_to_team\x00'}}) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x823c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x0, 0x59455247, 0x6, 0xc, [{0x5c}, {0x4, 0x9}, {0x28c, 0x4}, {0x4c77, 0x3}, {0xf3, 0x6}, {0x20, 0x7}, {0x4, 0x3}, {0x8000}], 0x5, 0x1, 0x3, 0x2, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:55 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 23:03:55 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x2}, 0x10) 23:03:55 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:55 executing program 4: r0 = socket(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @remote, 'veth0_to_team\x00'}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x823c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket(0x1d, 0x3, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @remote, 'veth0_to_team\x00'}}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x823c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) 23:03:55 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x0, 0x59455247, 0x6, 0xc, [{0x5c}, {0x4, 0x9}, {0x28c, 0x4}, {0x4c77, 0x3}, {0xf3, 0x6}, {0x20, 0x7}, {0x4, 0x3}, {0x8000}], 0x5, 0x1, 0x3, 0x2, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x2, 0x0, 0x59455247, 0x6, 0xc, [{0x5c}, {0x4, 0x9}, {0x28c, 0x4}, {0x4c77, 0x3}, {0xf3, 0x6}, {0x20, 0x7}, {0x4, 0x3}, {0x8000}], 0x5, 0x1, 0x3, 0x2, 0x2}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:55 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 23:03:55 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async, rerun: 64) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x2}, 0x10) (rerun: 64) 23:03:55 executing program 0: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)=@multiplanar_userptr={0x1ff, 0x0, 0x4, 0x60018, 0xfffffffe, {r1, r2/1000+10000}, {0x5, 0x8, 0x1, 0x8, 0x4, 0x37, "462944a3"}, 0x7, 0x2, {&(0x7f0000000180)=[{0x4, 0x20, {&(0x7f00000002c0)}, 0x8}, {0x5, 0x1, {&(0x7f0000000100)}, 0xca38}]}, 0x7}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000280)={0x80000000, 0x0, 0x4, 0x0, 0x6}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 0: r0 = socket(0x0, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x2}, 0x10) 23:03:56 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000000)) 23:03:56 executing program 4: socket(0x1d, 0x3, 0x1) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x8, 0x0, 0x8}) 23:03:56 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000c7, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r3 = socket(0x23, 0x80a, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x6, 0x3, 0xb, @private2, @local, 0x80, 0x8000, 0x81, 0x4}}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x89a7, 0x1, 0x2, 0x0, 0xa9}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000000)) 23:03:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)=@multiplanar_userptr={0x1ff, 0x0, 0x4, 0x60018, 0xfffffffe, {r1, r2/1000+10000}, {0x5, 0x8, 0x1, 0x8, 0x4, 0x37, "462944a3"}, 0x7, 0x2, {&(0x7f0000000180)=[{0x4, 0x20, {&(0x7f00000002c0)}, 0x8}, {0x5, 0x1, {&(0x7f0000000100)}, 0xca38}]}, 0x7}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000280)={0x80000000, 0x0, 0x4, 0x0, 0x6}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 0: r0 = socket(0x0, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000c7, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) r3 = socket(0x23, 0x80a, 0x7) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x6, 0x3, 0xb, @private2, @local, 0x80, 0x8000, 0x81, 0x4}}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x89a7, 0x1, 0x2, 0x0, 0xa9}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 4: socket(0x1d, 0x3, 0x1) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x8, 0x0, 0x8}) 23:03:56 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000000)) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000000)) (async) 23:03:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)=@multiplanar_userptr={0x1ff, 0x0, 0x4, 0x60018, 0xfffffffe, {r1, r2/1000+10000}, {0x5, 0x8, 0x1, 0x8, 0x4, 0x37, "462944a3"}, 0x7, 0x2, {&(0x7f0000000180)=[{0x4, 0x20, {&(0x7f00000002c0)}, 0x8}, {0x5, 0x1, {&(0x7f0000000100)}, 0xca38}]}, 0x7}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000280)={0x80000000, 0x0, 0x4, 0x0, 0x6}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 0: r0 = socket(0x0, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 4: socket(0x1d, 0x3, 0x1) (async) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x8, 0x0, 0x8}) 23:03:56 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 5: r0 = socket(0x18, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:56 executing program 4: ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) socket(0x1d, 0x3, 0x1) 23:03:56 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 5: r0 = socket(0x18, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000c7, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) r3 = socket(0x23, 0x80a, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x6, 0x3, 0xb, @private2, @local, 0x80, 0x8000, 0x81, 0x4}}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x89a7, 0x1, 0x2, 0x0, 0xa9}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x7, 0x1, 0x4, 0x10000, 0x106, {r1, r2/1000+60000}, {0x5, 0x8, 0x9, 0x6, 0xaa, 0x9, "0e9e7cf9"}, 0x200, 0x1, {&(0x7f0000000100)=[{0x0, 0x2, {0x4}, 0x3}, {0xc, 0x1, {0x2}}]}, 0xf67}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 4: ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) (async) socket(0x1d, 0x3, 0x1) 23:03:56 executing program 0: r0 = socket(0x1d, 0x0, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 5: r0 = socket(0x18, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:56 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 4: ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) socket(0x1d, 0x3, 0x1) 23:03:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x7, 0x1, 0x4, 0x10000, 0x106, {r1, r2/1000+60000}, {0x5, 0x8, 0x9, 0x6, 0xaa, 0x9, "0e9e7cf9"}, 0x200, 0x1, {&(0x7f0000000100)=[{0x0, 0x2, {0x4}, 0x3}, {0xc, 0x1, {0x2}}]}, 0xf67}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x7, 0x1, 0x4, 0x10000, 0x106, {r1, r2/1000+60000}, {0x5, 0x8, 0x9, 0x6, 0xaa, 0x9, "0e9e7cf9"}, 0x200, 0x1, {&(0x7f0000000100)=[{0x0, 0x2, {0x4}, 0x3}, {0xc, 0x1, {0x2}}]}, 0xf67}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:56 executing program 0: r0 = socket(0x1d, 0x0, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@userptr={0x9, 0x1, 0x4, 0x1, 0x1, {r2, r3/1000+60000}, {0x2, 0x1, 0x3, 0x5, 0x3f, 0x9, "f70254c4"}, 0x3, 0x2, {&(0x7f00000000c0)}, 0x7fff}) 23:03:56 executing program 5: r0 = socket(0x1d, 0x80000, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast]}, 0x40) 23:03:56 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) 23:03:56 executing program 0: r0 = socket(0x1d, 0x0, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@userptr={0x9, 0x1, 0x4, 0x1, 0x1, {r2, r3/1000+60000}, {0x2, 0x1, 0x3, 0x5, 0x3f, 0x9, "f70254c4"}, 0x3, 0x2, {&(0x7f00000000c0)}, 0x7fff}) 23:03:56 executing program 5: r0 = socket(0x1d, 0x80000, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast]}, 0x40) socket(0x1d, 0x80000, 0x1) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast]}, 0x40) (async) 23:03:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x7, 0x1, 0x4, 0x10000, 0x106, {r1, r2/1000+60000}, {0x5, 0x8, 0x9, 0x6, 0xaa, 0x9, "0e9e7cf9"}, 0x200, 0x1, {&(0x7f0000000100)=[{0x0, 0x2, {0x4}, 0x3}, {0xc, 0x1, {0x2}}]}, 0xf67}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) socket(0x1d, 0x3, 0x1) (async) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) (async) 23:03:56 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 0: r0 = socket(0x1d, 0x3, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 5: r0 = socket(0x1d, 0x80000, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast]}, 0x40) socket(0x1d, 0x80000, 0x1) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast]}, 0x40) (async) 23:03:56 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) socket(0x1d, 0x3, 0x1) (async) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) (async) 23:03:56 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@userptr={0x9, 0x1, 0x4, 0x1, 0x1, {r2, r3/1000+60000}, {0x2, 0x1, 0x3, 0x5, 0x3f, 0x9, "f70254c4"}, 0x3, 0x2, {&(0x7f00000000c0)}, 0x7fff}) 23:03:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x0, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 0: r0 = socket(0x1d, 0x3, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 5: r0 = socket(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) [ 1322.720111] can: request_module (can-proto-0) failed. 23:03:56 executing program 3: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 4: socket(0x15, 0x3, 0x1) 23:03:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x0, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 0: r0 = socket(0x1d, 0x3, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 5: r0 = socket(0x1d, 0x3, 0x1) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:56 executing program 4: socket(0x15, 0x3, 0x1) 23:03:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) [ 1322.799385] can: request_module (can-proto-0) failed. 23:03:56 executing program 3: r0 = socket(0x0, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = syz_open_dev$audion(&(0x7f0000000140), 0xf, 0x420002) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@overlay={0x80000001, 0x1, 0x4, 0xe000, 0xffff, {0x77359400}, {0xe1b342c0e7135902, 0x2, 0x7f, 0xcf, 0xf4, 0x4, "4ec34a00"}, 0x400, 0x3, {}, 0xb25}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r3, 0x4, 0x2, 0x9, 0x2, 0x0, @local, @remote, 0x8, 0x10, 0x4, 0x5}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r5) connect$rose(r5, &(0x7f0000000400)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) socket$pptp(0x18, 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x7, 0x6, 0x1, {0x1, @sdr={0x20493859, 0x2}}, 0x4}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x0, 0x0, 0x10000, 0x3, 0x7}, 0xffffffffffffffff, 0xfffffffffffffff7, 0x4}) 23:03:56 executing program 4: socket(0x15, 0x3, 0x1) 23:03:56 executing program 5: r0 = socket(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x1d, 0x3, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:03:56 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:56 executing program 0: socket(0x1d, 0x3, 0x1) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) r1 = syz_open_dev$audion(&(0x7f0000000140), 0xf, 0x420002) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@overlay={0x80000001, 0x1, 0x4, 0xe000, 0xffff, {0x77359400}, {0xe1b342c0e7135902, 0x2, 0x7f, 0xcf, 0xf4, 0x4, "4ec34a00"}, 0x400, 0x3, {}, 0xb25}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r3, 0x4, 0x2, 0x9, 0x2, 0x0, @local, @remote, 0x8, 0x10, 0x4, 0x5}}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r5) (async) connect$rose(r5, &(0x7f0000000400)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) (async) socket$pptp(0x18, 0x1, 0x2) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x7, 0x6, 0x1, {0x1, @sdr={0x20493859, 0x2}}, 0x4}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x0, 0x0, 0x10000, 0x3, 0x7}, 0xffffffffffffffff, 0xfffffffffffffff7, 0x4}) [ 1322.899934] can: request_module (can-proto-0) failed. 23:03:56 executing program 4: socket(0x1d, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) connect$rose(r2, &(0x7f0000000180)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80c1) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)) 23:03:56 executing program 0: socket(0x1d, 0x3, 0x1) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x200000, 0x1, 0x4}) 23:03:56 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000080)=""/103, 0x67}, {&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000200)=""/87, 0x57}, {&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f0000000380)=""/53, 0x35}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000540)=""/64, 0x40}], 0xa, &(0x7f00000007c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0xfffffffe}, &(0x7f0000000640), &(0x7f0000000680)=0x5, 0xffffffffffff0001, 0xffffffffffff9a7e, 0x401, 0x3, 0x31, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x1}, &(0x7f00000006c0)=0x3, &(0x7f0000000700)=0x2, 0x0, 0xda0, 0x80000000, 0x5d798f40, 0x45, 0x7fffffffffffffff}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x8c8}, &(0x7f0000000740)=0x7, &(0x7f0000000780)=0x56, 0x8001, 0x4, 0x8001, 0x6, 0x4, 0x756}}], 0x108, 0x10}, 0x20000000) 23:03:56 executing program 3: r0 = socket(0x0, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 4: socket(0x1d, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) connect$rose(r2, &(0x7f0000000180)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80c1) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)) socket(0x1d, 0x3, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) (async) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) connect$rose(r2, &(0x7f0000000180)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80c1) (async) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)) (async) 23:03:56 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x200000, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x200000, 0x1, 0x4}) (async) 23:03:56 executing program 0: socket(0x1d, 0x3, 0x1) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000080)=""/103, 0x67}, {&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000200)=""/87, 0x57}, {&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f0000000380)=""/53, 0x35}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000540)=""/64, 0x40}], 0xa, &(0x7f00000007c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0xfffffffe}, &(0x7f0000000640), &(0x7f0000000680)=0x5, 0xffffffffffff0001, 0xffffffffffff9a7e, 0x401, 0x3, 0x31, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x1}, &(0x7f00000006c0)=0x3, &(0x7f0000000700)=0x2, 0x0, 0xda0, 0x80000000, 0x5d798f40, 0x45, 0x7fffffffffffffff}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x8c8}, &(0x7f0000000740)=0x7, &(0x7f0000000780)=0x56, 0x8001, 0x4, 0x8001, 0x6, 0x4, 0x756}}], 0x108, 0x10}, 0x20000000) 23:03:56 executing program 3: r0 = socket(0x0, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:56 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = syz_open_dev$audion(&(0x7f0000000140), 0xf, 0x420002) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@overlay={0x80000001, 0x1, 0x4, 0xe000, 0xffff, {0x77359400}, {0xe1b342c0e7135902, 0x2, 0x7f, 0xcf, 0xf4, 0x4, "4ec34a00"}, 0x400, 0x3, {}, 0xb25}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r3, 0x4, 0x2, 0x9, 0x2, 0x0, @local, @remote, 0x8, 0x10, 0x4, 0x5}}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r5) connect$rose(r5, &(0x7f0000000400)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) (async) socket$pptp(0x18, 0x1, 0x2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000200)={0x7, 0x6, 0x1, {0x1, @sdr={0x20493859, 0x2}}, 0x4}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0x0, 0x0, 0x10000, 0x3, 0x7}, 0xffffffffffffffff, 0xfffffffffffffff7, 0x4}) 23:03:56 executing program 4: socket(0x1d, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) connect$rose(r2, &(0x7f0000000180)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80c1) (async) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)) 23:03:56 executing program 0: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:56 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x200000, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x200000, 0x1, 0x4}) (async) 23:03:56 executing program 0: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:56 executing program 3: r0 = socket(0x1d, 0x0, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:57 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) sendmsg$rds(r1, &(0x7f0000000900)={&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f0000000080)=""/103, 0x67}, {&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000200)=""/87, 0x57}, {&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f0000000380)=""/53, 0x35}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000540)=""/64, 0x40}], 0xa, &(0x7f00000007c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0xfffffffe}, &(0x7f0000000640), &(0x7f0000000680)=0x5, 0xffffffffffff0001, 0xffffffffffff9a7e, 0x401, 0x3, 0x31, 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x1}, &(0x7f00000006c0)=0x3, &(0x7f0000000700)=0x2, 0x0, 0xda0, 0x80000000, 0x5d798f40, 0x45, 0x7fffffffffffffff}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x8c8}, &(0x7f0000000740)=0x7, &(0x7f0000000780)=0x56, 0x8001, 0x4, 0x8001, 0x6, 0x4, 0x756}}], 0x108, 0x10}, 0x20000000) 23:03:57 executing program 4: socket(0x1d, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) 23:03:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000000c0)={0xff, @broadcast}) 23:03:57 executing program 3: r0 = socket(0x1d, 0x0, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000100)) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:57 executing program 0: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:57 executing program 4: socket(0x1d, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket(0x1d, 0x4, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) 23:03:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000000c0)={0xff, @broadcast}) 23:03:57 executing program 5: r0 = socket(0x9, 0x1, 0xffffffff) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 23:03:57 executing program 0: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private}}, 0x1e) 23:03:57 executing program 3: r0 = socket(0x1d, 0x0, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) (async) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000100)) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:57 executing program 4: socket(0x1d, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket(0x1d, 0x4, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) 23:03:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000000c0)={0xff, @broadcast}) 23:03:57 executing program 0: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:57 executing program 5: r0 = socket(0x9, 0x1, 0xffffffff) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async, rerun: 64) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (rerun: 64) 23:03:57 executing program 3: r0 = socket(0x1d, 0x3, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, 0x0, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000100)) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r1, 0x0, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000100)) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:57 executing program 0: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:57 executing program 4: socket(0x2a, 0x0, 0x80004) 23:03:57 executing program 5: r0 = socket(0x9, 0x1, 0xffffffff) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 23:03:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xffffffff, 0x1, 0x4, 0x0, 0x8}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:57 executing program 4: socket(0x2a, 0x0, 0x80004) 23:03:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xffffffff, 0x1, 0x4, 0x0, 0x8}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:57 executing program 3: r0 = socket(0x1d, 0x3, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:57 executing program 0: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) [ 1323.415080] can: request_module (can-proto-0) failed. 23:03:57 executing program 5: r0 = socket(0x6, 0x2, 0x90d2) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48004848}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x4bef7b93f9f0259b, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x873}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2476a9143d36"}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000000) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 23:03:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000100), 0x2f0, 0x200000) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@userptr={0xffff, 0x0, 0x4, 0x40, 0xbb, {0x0, 0xea60}, {0x2, 0x2, 0x3, 0x5, 0x0, 0x1, "a0371564"}, 0x8, 0x2, {&(0x7f00000000c0)}, 0x1, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:57 executing program 4: socket(0x2a, 0x0, 0x80004) 23:03:57 executing program 0: bind$pptp(0xffffffffffffffff, 0x0, 0x0) 23:03:57 executing program 5: r0 = socket(0x6, 0x2, 0x90d2) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48004848}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x4bef7b93f9f0259b, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x873}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2476a9143d36"}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000000) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 23:03:57 executing program 4: r0 = socket(0x1d, 0x3, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0xef8754696ee5df0e, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) 23:03:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xffffffff, 0x1, 0x4, 0x0, 0x8}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000100), 0x2f0, 0x200000) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@userptr={0xffff, 0x0, 0x4, 0x40, 0xbb, {0x0, 0xea60}, {0x2, 0x2, 0x3, 0x5, 0x0, 0x1, "a0371564"}, 0x8, 0x2, {&(0x7f00000000c0)}, 0x1, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$audion(&(0x7f0000000100), 0x2f0, 0x200000) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@userptr={0xffff, 0x0, 0x4, 0x40, 0xbb, {0x0, 0xea60}, {0x2, 0x2, 0x3, 0x5, 0x0, 0x1, "a0371564"}, 0x8, 0x2, {&(0x7f00000000c0)}, 0x1, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:57 executing program 0: bind$pptp(0xffffffffffffffff, 0x0, 0x0) 23:03:57 executing program 3: r0 = socket(0x1d, 0x3, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) [ 1323.553793] can: request_module (can-proto-0) failed. 23:03:57 executing program 4: r0 = socket(0x1d, 0x3, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0xef8754696ee5df0e, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) socket(0x1d, 0x3, 0x1) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0xef8754696ee5df0e, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) (async) 23:03:57 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000100), 0x2f0, 0x200000) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@userptr={0xffff, 0x0, 0x4, 0x40, 0xbb, {0x0, 0xea60}, {0x2, 0x2, 0x3, 0x5, 0x0, 0x1, "a0371564"}, 0x8, 0x2, {&(0x7f00000000c0)}, 0x1, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$audion(&(0x7f0000000100), 0x2f0, 0x200000) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@userptr={0xffff, 0x0, 0x4, 0x40, 0xbb, {0x0, 0xea60}, {0x2, 0x2, 0x3, 0x5, 0x0, 0x1, "a0371564"}, 0x8, 0x2, {&(0x7f00000000c0)}, 0x1, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:57 executing program 1: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x0, 0xfc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:57 executing program 5: r0 = socket(0x6, 0x2, 0x90d2) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48004848}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x4bef7b93f9f0259b, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x873}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2476a9143d36"}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000000) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 23:03:57 executing program 0: bind$pptp(0xffffffffffffffff, 0x0, 0x0) 23:03:57 executing program 1: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) (async, rerun: 32) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x0, 0xfc}) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:57 executing program 0: r0 = socket(0x0, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:57 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10) r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40100) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x4001) 23:03:57 executing program 3: socket(0x1d, 0x3, 0x1) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:57 executing program 1: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x0, 0xfc}) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) [ 1323.662092] can: request_module (can-proto-0) failed. 23:03:57 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xff, 0x3, 0x2, {0x0, @vbi={0x8d, 0x3, 0x3ce, 0x20343059, [0x10001, 0x6], [0x9, 0xcb], 0x2}}, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xfffffff7, 0x1, 0x2, 0x0, 0x4}) 23:03:57 executing program 4: r0 = socket(0x1d, 0x3, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0xef8754696ee5df0e, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) 23:03:57 executing program 0: r0 = socket(0x0, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:57 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10) r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40100) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x4001) 23:03:57 executing program 3: socket(0x1d, 0x3, 0x1) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @raw_data="747f076faa72feb08dd9fd54800790a12beeae45260846d49e9c832b2454c83c20724afd7ec9549510ee0e59ab93457bf5924629091414163bc10e51544f50147b352cf5b39032810ccdfaec87d99b063212b1a80baa74731e147c58de9b28beec6e0fa488f3c6e58c945831278d3f528d894919fd2a6bfb0bb35efe2c6031959e0d71b606076ec773d3d2c98d5f869fa89498df75a27655d55ee7299d02345bdfe6cc340ab9e2386242b0e0fd83219da43395caf6aec42c1b0be5839c5e217807d93e12a369d41e"}) 23:03:57 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async, rerun: 64) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 64) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xff, 0x3, 0x2, {0x0, @vbi={0x8d, 0x3, 0x3ce, 0x20343059, [0x10001, 0x6], [0x9, 0xcb], 0x2}}, 0x1}) (rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xfffffff7, 0x1, 0x2, 0x0, 0x4}) 23:03:57 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10) r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40100) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x4001) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10) (async) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40100) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x4001) (async) 23:03:57 executing program 3: socket(0x1d, 0x3, 0x1) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:03:57 executing program 0: r0 = socket(0x0, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @raw_data="747f076faa72feb08dd9fd54800790a12beeae45260846d49e9c832b2454c83c20724afd7ec9549510ee0e59ab93457bf5924629091414163bc10e51544f50147b352cf5b39032810ccdfaec87d99b063212b1a80baa74731e147c58de9b28beec6e0fa488f3c6e58c945831278d3f528d894919fd2a6bfb0bb35efe2c6031959e0d71b606076ec773d3d2c98d5f869fa89498df75a27655d55ee7299d02345bdfe6cc340ab9e2386242b0e0fd83219da43395caf6aec42c1b0be5839c5e217807d93e12a369d41e"}) 23:03:57 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe0, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6435}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x9a5}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x40000) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1, 0xbd}) 23:03:57 executing program 5: r0 = socket(0x1d, 0x3, 0x5) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0x7) 23:03:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @raw_data="747f076faa72feb08dd9fd54800790a12beeae45260846d49e9c832b2454c83c20724afd7ec9549510ee0e59ab93457bf5924629091414163bc10e51544f50147b352cf5b39032810ccdfaec87d99b063212b1a80baa74731e147c58de9b28beec6e0fa488f3c6e58c945831278d3f528d894919fd2a6bfb0bb35efe2c6031959e0d71b606076ec773d3d2c98d5f869fa89498df75a27655d55ee7299d02345bdfe6cc340ab9e2386242b0e0fd83219da43395caf6aec42c1b0be5839c5e217807d93e12a369d41e"}) 23:03:57 executing program 3: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:57 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe0, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6435}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x9a5}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1, 0xbd}) 23:03:57 executing program 0: r0 = socket(0x1d, 0x0, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:57 executing program 3: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:57 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async, rerun: 32) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xff, 0x3, 0x2, {0x0, @vbi={0x8d, 0x3, 0x3ce, 0x20343059, [0x10001, 0x6], [0x9, 0xcb], 0x2}}, 0x1}) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xfffffff7, 0x1, 0x2, 0x0, 0x4}) 23:03:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x4}) 23:03:57 executing program 5: r0 = socket(0x1d, 0x3, 0x5) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0x7) [ 1323.969905] can: request_module (can-proto-5) failed. 23:03:57 executing program 3: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:57 executing program 0: r0 = socket(0x1d, 0x0, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:57 executing program 4: socket(0x1d, 0x3, 0x1) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe0, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6435}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x9a5}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1, 0xbd}) 23:03:57 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x4}) (async) 23:03:57 executing program 0: r0 = socket(0x1d, 0x0, 0x1) bind$pptp(r0, 0x0, 0x0) 23:03:57 executing program 3: r0 = socket(0x1d, 0x3, 0x1) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private}}, 0x1e) 23:03:57 executing program 5: r0 = socket(0x1d, 0x3, 0x5) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)=0x7) 23:03:57 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:03:57 executing program 0: r0 = socket(0x1d, 0x3, 0x0) bind$pptp(r0, 0x0, 0x0) 23:03:58 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040), 0x20002000000cb, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) bind$rds(r1, &(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x400001, 0x1, 0x3, 0x0, 0x1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x200, 0x4001) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000180), 0x4, 0x620000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2) 23:03:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x4}) 23:03:58 executing program 4: socket(0x1d, 0x3, 0x1) (async, rerun: 32) r0 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:03:58 executing program 3: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x0, 0xfc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f00000000c0)=[@free_buffer, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="850900000000000000007f0000000000000000003a0000000000a700852a68770a00000200000000000000000000852a62770a10006feb00"/76], &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0x67, 0x0, &(0x7f0000000140)="8fb6bf77d12fb4bbe149081288b7c2fdb34bf5a1e3ddb30ef17d4a650dafeaa5187163c68ad12efb934a4c16f4d18e4ea3e4bbb8f43cf01c7145a787e74fffee881ed238e889ae567ca26ebccb66f7e59d16aee8004b5093d6410e3b0c77f332e91a6573394c69"}) r0 = socket(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), 0xffffffffffffffff) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = socket(0xb, 0x800, 0x4c4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x439}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc3b8}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) [ 1324.163085] can_create: 1 callbacks suppressed [ 1324.163090] can: request_module (can-proto-5) failed. 23:03:58 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040), 0x20002000000cb, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) bind$rds(r1, &(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x400001, 0x1, 0x3, 0x0, 0x1}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x200, 0x4001) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_dev$audion(&(0x7f0000000180), 0x4, 0x620000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2) 23:03:58 executing program 0: r0 = socket(0x1d, 0x3, 0x0) bind$pptp(r0, 0x0, 0x0) [ 1324.220343] can: request_module (can-proto-0) failed. 23:03:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8005, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f00000000c0)=[@free_buffer, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="850900000000000000007f0000000000000000003a0000000000a700852a68770a00000200000000000000000000852a62770a10006feb00"/76], &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0x67, 0x0, &(0x7f0000000140)="8fb6bf77d12fb4bbe149081288b7c2fdb34bf5a1e3ddb30ef17d4a650dafeaa5187163c68ad12efb934a4c16f4d18e4ea3e4bbb8f43cf01c7145a787e74fffee881ed238e889ae567ca26ebccb66f7e59d16aee8004b5093d6410e3b0c77f332e91a6573394c69"}) (async) r0 = socket(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), 0xffffffffffffffff) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) r1 = socket(0xb, 0x800, 0x4c4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x439}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc3b8}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) 23:03:58 executing program 3: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x0, 0xfc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:58 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket(0x1d, 0x3, 0x1) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) 23:03:58 executing program 2: syz_open_dev$vim2m(&(0x7f0000000040), 0x20002000000cb, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) bind$rds(r1, &(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x400001, 0x1, 0x3, 0x0, 0x1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x200, 0x4001) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$audion(&(0x7f0000000180), 0x4, 0x620000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x20002000000cb, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) bind$rds(r1, &(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x400001, 0x1, 0x3, 0x0, 0x1}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000000), 0x200, 0x4001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$audion(&(0x7f0000000180), 0x4, 0x620000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x2) (async) 23:03:58 executing program 0: r0 = socket(0x1d, 0x3, 0x0) bind$pptp(r0, 0x0, 0x0) 23:03:58 executing program 3: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x0, 0xfc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) [ 1324.312129] can: request_module (can-proto-0) failed. 23:03:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8005, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:58 executing program 4: socket(0x18, 0x3, 0x8001) 23:03:58 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f00000000c0)=[@free_buffer, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="850900000000000000007f0000000000000000003a0000000000a700852a68770a00000200000000000000000000852a62770a10006feb00"/76], &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0x67, 0x0, &(0x7f0000000140)="8fb6bf77d12fb4bbe149081288b7c2fdb34bf5a1e3ddb30ef17d4a650dafeaa5187163c68ad12efb934a4c16f4d18e4ea3e4bbb8f43cf01c7145a787e74fffee881ed238e889ae567ca26ebccb66f7e59d16aee8004b5093d6410e3b0c77f332e91a6573394c69"}) (async) r0 = socket(0x1d, 0x3, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), 0xffffffffffffffff) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) r1 = socket(0xb, 0x800, 0x4c4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x439}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc3b8}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) 23:03:58 executing program 2: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:selinux_config_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40850}, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000200), 0x9, 0x800c0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20000091) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:58 executing program 4: socket(0x18, 0x3, 0x8001) socket(0x18, 0x3, 0x8001) (async) 23:03:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) 23:03:58 executing program 3: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x0, 0xfc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:58 executing program 5: socket(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040), 0xf7, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0xfffffffffffffec9) 23:03:58 executing program 0: socket(0x1d, 0x3, 0x1) bind$pptp(0xffffffffffffffff, 0x0, 0x0) [ 1324.407615] can: request_module (can-proto-0) failed. 23:03:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async, rerun: 64) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) (rerun: 64) 23:03:58 executing program 2: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:selinux_config_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40850}, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000200), 0x9, 0x800c0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20000091) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:selinux_config_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40850}, 0x4) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) syz_open_dev$audion(&(0x7f0000000200), 0x9, 0x800c0) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20000091) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:58 executing program 3: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x0, 0xfc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:58 executing program 0: socket(0x1d, 0x3, 0x1) bind$pptp(0xffffffffffffffff, 0x0, 0x0) 23:03:58 executing program 4: socket(0x18, 0x3, 0x8001) 23:03:58 executing program 5: socket(0x1d, 0x3, 0x1) (async, rerun: 32) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async, rerun: 32) r0 = syz_open_dev$audion(&(0x7f0000000040), 0xf7, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0xfffffffffffffec9) 23:03:58 executing program 3: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x0, 0xfc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) (async) 23:03:58 executing program 0: socket(0x1d, 0x3, 0x1) bind$pptp(0xffffffffffffffff, 0x0, 0x0) 23:03:58 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) write$snapshot(r0, &(0x7f0000000000)="969325d68d0ea2605ba6ea2c4c3857eb036cdf9a38ec8e21cf76787830f8ba30eeb6c532e27fede62ad64be2ce4eebc5fc1ad943b7c713d10fec8cb48528192f3b19c14c5a4020d64d7a7d7250ccf3c9b774e9a0b547dd05875e353d5a5db17fb1777472442cbde84b04bf956c2809067319e1f1974c23ce0e73f079c9ac1d13882aa8", 0x83) socket(0x1d, 0x3, 0x1) 23:03:58 executing program 2: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:selinux_config_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40850}, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000200), 0x9, 0x800c0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20000091) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:selinux_config_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40850}, 0x4) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) syz_open_dev$audion(&(0x7f0000000200), 0x9, 0x800c0) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20000091) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:58 executing program 5: socket(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040), 0xf7, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0xfffffffffffffec9) socket(0x1d, 0x3, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0xf7, 0x4000) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0xfffffffffffffec9) (async) 23:03:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:58 executing program 3: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x0, 0xfc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:58 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) write$snapshot(r0, &(0x7f0000000000)="969325d68d0ea2605ba6ea2c4c3857eb036cdf9a38ec8e21cf76787830f8ba30eeb6c532e27fede62ad64be2ce4eebc5fc1ad943b7c713d10fec8cb48528192f3b19c14c5a4020d64d7a7d7250ccf3c9b774e9a0b547dd05875e353d5a5db17fb1777472442cbde84b04bf956c2809067319e1f1974c23ce0e73f079c9ac1d13882aa8", 0x83) socket(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) write$snapshot(r0, &(0x7f0000000000)="969325d68d0ea2605ba6ea2c4c3857eb036cdf9a38ec8e21cf76787830f8ba30eeb6c532e27fede62ad64be2ce4eebc5fc1ad943b7c713d10fec8cb48528192f3b19c14c5a4020d64d7a7d7250ccf3c9b774e9a0b547dd05875e353d5a5db17fb1777472442cbde84b04bf956c2809067319e1f1974c23ce0e73f079c9ac1d13882aa8", 0x83) (async) socket(0x1d, 0x3, 0x1) (async) 23:03:58 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f00000000c0)=[@free_buffer, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="850900000000000000007f0000000000000000003a0000000000a700852a68770a00000200000000000000000000852a62770a10006feb00"/76], &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0x67, 0x0, &(0x7f0000000140)="8fb6bf77d12fb4bbe149081288b7c2fdb34bf5a1e3ddb30ef17d4a650dafeaa5187163c68ad12efb934a4c16f4d18e4ea3e4bbb8f43cf01c7145a787e74fffee881ed238e889ae567ca26ebccb66f7e59d16aee8004b5093d6410e3b0c77f332e91a6573394c69"}) r0 = socket(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), 0xffffffffffffffff) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = socket(0xb, 0x800, 0x4c4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xb8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x439}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc3b8}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) 23:03:58 executing program 5: r0 = socket(0x22, 0x3, 0x20105) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:58 executing program 3: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x3, 0x3, 0x0, 0xfc}) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000039, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:58 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xffffffff, 0x1, 0x4, 0x0, 0x8}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:58 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) write$snapshot(r0, &(0x7f0000000000)="969325d68d0ea2605ba6ea2c4c3857eb036cdf9a38ec8e21cf76787830f8ba30eeb6c532e27fede62ad64be2ce4eebc5fc1ad943b7c713d10fec8cb48528192f3b19c14c5a4020d64d7a7d7250ccf3c9b774e9a0b547dd05875e353d5a5db17fb1777472442cbde84b04bf956c2809067319e1f1974c23ce0e73f079c9ac1d13882aa8", 0x83) socket(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) write$snapshot(r0, &(0x7f0000000000)="969325d68d0ea2605ba6ea2c4c3857eb036cdf9a38ec8e21cf76787830f8ba30eeb6c532e27fede62ad64be2ce4eebc5fc1ad943b7c713d10fec8cb48528192f3b19c14c5a4020d64d7a7d7250ccf3c9b774e9a0b547dd05875e353d5a5db17fb1777472442cbde84b04bf956c2809067319e1f1974c23ce0e73f079c9ac1d13882aa8", 0x83) (async) socket(0x1d, 0x3, 0x1) (async) 23:03:58 executing program 3: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000100)) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:58 executing program 5: r0 = socket(0x22, 0x3, 0x20105) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000039, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:58 executing program 0: r0 = socket(0x18, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:58 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:58 executing program 0: r0 = socket(0x18, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000039, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000039, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:58 executing program 4: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) socket(0x1d, 0x3, 0x1) 23:03:58 executing program 3: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:58 executing program 5: r0 = socket(0x22, 0x3, 0x20105) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:58 executing program 0: r0 = socket(0x18, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x400d4}, 0x4008014) r1 = socket(0x9, 0x3, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x40100) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) 23:03:58 executing program 4: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) socket(0x1d, 0x3, 0x1) 23:03:58 executing program 1: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000240)={0x0, 0x7, 0x1ff, 0x2, 0xc, 0x4, 0x6, 0x9, 0x27000000, 0x0, 0x5, 0x376}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x0, @pix={0x5, 0xb993, 0x38416761, 0x1, 0x7, 0x6, 0x2, 0xabe, 0x0, 0x7, 0x1, 0x6}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x3}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e4ebc654", @ANYRES16=0x0, @ANYBLOB="00002abd7000fddbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r3 = socket$inet6(0xa, 0x5, 0x200) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3f, 0x9, 0x2, @local, @mcast2, 0x7800, 0x9, 0x10000, 0x101}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x49a, 0x3, 0x4, 0x1, 0xfd, {0x0, 0x2710}, {0x4, 0x0, 0x0, 0x20, 0x1, 0x3, "05ed6f98"}, 0x9, 0x3, {&(0x7f00000000c0)=[{0x7, 0x9, {0x8e}, 0x4}, {0x0, 0x9, {0x200}, 0x3}]}, 0xa, 0x0, r4}) 23:03:58 executing program 0: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:03:58 executing program 3: read$usbmon(0xffffffffffffffff, &(0x7f0000000180)=""/16, 0x10) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:58 executing program 4: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) socket(0x1d, 0x3, 0x1) socket(0xf, 0x3, 0x2) (async) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) (async) socket(0x1d, 0x3, 0x1) (async) 23:03:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fbdbdf250b00000008020600", @ANYRES32=0x0, @ANYBLOB="00002a000100000008003100ce000000aeff0300", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x6048040}, 0x24040051) 23:03:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x400d4}, 0x4008014) r1 = socket(0x9, 0x3, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x40100) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x400d4}, 0x4008014) (async) socket(0x9, 0x3, 0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x40100) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) (async) 23:03:58 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:58 executing program 1: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000240)={0x0, 0x7, 0x1ff, 0x2, 0xc, 0x4, 0x6, 0x9, 0x27000000, 0x0, 0x5, 0x376}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x0, @pix={0x5, 0xb993, 0x38416761, 0x1, 0x7, 0x6, 0x2, 0xabe, 0x0, 0x7, 0x1, 0x6}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x3}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e4ebc654", @ANYRES16=0x0, @ANYBLOB="00002abd7000fddbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r3 = socket$inet6(0xa, 0x5, 0x200) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3f, 0x9, 0x2, @local, @mcast2, 0x7800, 0x9, 0x10000, 0x101}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x49a, 0x3, 0x4, 0x1, 0xfd, {0x0, 0x2710}, {0x4, 0x0, 0x0, 0x20, 0x1, 0x3, "05ed6f98"}, 0x9, 0x3, {&(0x7f00000000c0)=[{0x7, 0x9, {0x8e}, 0x4}, {0x0, 0x9, {0x200}, 0x3}]}, 0xa, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000240)={0x0, 0x7, 0x1ff, 0x2, 0xc, 0x4, 0x6, 0x9, 0x27000000, 0x0, 0x5, 0x376}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x0, @pix={0x5, 0xb993, 0x38416761, 0x1, 0x7, 0x6, 0x2, 0xabe, 0x0, 0x7, 0x1, 0x6}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x3}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e4ebc654", @ANYRES16=0x0, @ANYBLOB="00002abd7000fddbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) socket$inet6(0xa, 0x5, 0x200) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3f, 0x9, 0x2, @local, @mcast2, 0x7800, 0x9, 0x10000, 0x101}}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x49a, 0x3, 0x4, 0x1, 0xfd, {0x0, 0x2710}, {0x4, 0x0, 0x0, 0x20, 0x1, 0x3, "05ed6f98"}, 0x9, 0x3, {&(0x7f00000000c0)=[{0x7, 0x9, {0x8e}, 0x4}, {0x0, 0x9, {0x200}, 0x3}]}, 0xa, 0x0, r4}) (async) 23:03:58 executing program 0: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:03:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fbdbdf250b00000008020600", @ANYRES32=0x0, @ANYBLOB="00002a000100000008003100ce000000aeff0300", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x6048040}, 0x24040051) 23:03:58 executing program 4: socket(0x1d, 0x3, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) openat$cgroup_pressure(r0, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) 23:03:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x400d4}, 0x4008014) (async) r1 = socket(0x9, 0x3, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x40100) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) 23:03:58 executing program 1: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000240)={0x0, 0x7, 0x1ff, 0x2, 0xc, 0x4, 0x6, 0x9, 0x27000000, 0x0, 0x5, 0x376}) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x0, @pix={0x5, 0xb993, 0x38416761, 0x1, 0x7, 0x6, 0x2, 0xabe, 0x0, 0x7, 0x1, 0x6}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x3}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async, rerun: 32) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e4ebc654", @ANYRES16=0x0, @ANYBLOB="00002abd7000fddbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) r3 = socket$inet6(0xa, 0x5, 0x200) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x3f, 0x9, 0x2, @local, @mcast2, 0x7800, 0x9, 0x10000, 0x101}}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x49a, 0x3, 0x4, 0x1, 0xfd, {0x0, 0x2710}, {0x4, 0x0, 0x0, 0x20, 0x1, 0x3, "05ed6f98"}, 0x9, 0x3, {&(0x7f00000000c0)=[{0x7, 0x9, {0x8e}, 0x4}, {0x0, 0x9, {0x200}, 0x3}]}, 0xa, 0x0, r4}) (rerun: 32) 23:03:58 executing program 0: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:03:58 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:58 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x400940) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/95}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x6, 0x6, 0x1, {0x2, @sliced={0x8, [0xffff, 0x9, 0x7fff, 0x8, 0x3, 0x3, 0x1ff, 0x1, 0x5, 0x1000, 0x3f, 0xfffe, 0x1, 0x4, 0x0, 0x3, 0xd7, 0x1, 0x5765, 0x7, 0x400, 0x81, 0xfff, 0x8, 0x101, 0x3, 0x4, 0x800, 0x20, 0x6, 0x0, 0x0, 0x3, 0xffff, 0x2, 0x1, 0x8, 0xe424, 0x6, 0x85, 0xb456, 0x5, 0x4c1, 0x4, 0x3c00, 0x9d, 0x101, 0x3], 0x2}}, 0x1}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000100)) 23:03:58 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fbdbdf250b00000008020600", @ANYRES32=0x0, @ANYBLOB="00002a000100000008003100ce000000aeff0300", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x6048040}, 0x24040051) 23:03:58 executing program 4: socket(0x1d, 0x3, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) openat$cgroup_pressure(r0, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) socket(0x1d, 0x3, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) openat$cgroup_pressure(r0, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) (async) 23:03:59 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x13}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:59 executing program 0: r0 = socket(0x0, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:59 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x400940) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/95}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x6, 0x6, 0x1, {0x2, @sliced={0x8, [0xffff, 0x9, 0x7fff, 0x8, 0x3, 0x3, 0x1ff, 0x1, 0x5, 0x1000, 0x3f, 0xfffe, 0x1, 0x4, 0x0, 0x3, 0xd7, 0x1, 0x5765, 0x7, 0x400, 0x81, 0xfff, 0x8, 0x101, 0x3, 0x4, 0x800, 0x20, 0x6, 0x0, 0x0, 0x3, 0xffff, 0x2, 0x1, 0x8, 0xe424, 0x6, 0x85, 0xb456, 0x5, 0x4c1, 0x4, 0x3c00, 0x9d, 0x101, 0x3], 0x2}}, 0x1}) (async) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000100)) 23:03:59 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x7) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x3, 0xc02, 0x2, {0x1, @sdr={0x32314d59, 0x6}}, 0x101}) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/mnt\x00') ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000200)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x200}) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000300)={{0x3, 0x2, 0xfffffff9, 0x1, 0x4}, 0x100000001, 0x10001, 0x1}) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x7) 23:03:59 executing program 4: socket(0x1d, 0x3, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) openat$cgroup_pressure(r0, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) socket(0x1d, 0x3, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) openat$cgroup_pressure(r0, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) (async) 23:03:59 executing program 0: r0 = socket(0x0, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 3: r0 = syz_open_dev$vim2m(0x0, 0x15, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:59 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x13}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:59 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x7) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x3, 0xc02, 0x2, {0x1, @sdr={0x32314d59, 0x6}}, 0x101}) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/mnt\x00') (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000200)) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x200}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000300)={{0x3, 0x2, 0xfffffff9, 0x1, 0x4}, 0x100000001, 0x10001, 0x1}) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x7) 23:03:59 executing program 4: socket(0x9, 0x800, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x9}, 0x2f) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 23:03:59 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x13}) (async, rerun: 32) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:59 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x400940) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/95}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x6, 0x6, 0x1, {0x2, @sliced={0x8, [0xffff, 0x9, 0x7fff, 0x8, 0x3, 0x3, 0x1ff, 0x1, 0x5, 0x1000, 0x3f, 0xfffe, 0x1, 0x4, 0x0, 0x3, 0xd7, 0x1, 0x5765, 0x7, 0x400, 0x81, 0xfff, 0x8, 0x101, 0x3, 0x4, 0x800, 0x20, 0x6, 0x0, 0x0, 0x3, 0xffff, 0x2, 0x1, 0x8, 0xe424, 0x6, 0x85, 0xb456, 0x5, 0x4c1, 0x4, 0x3c00, 0x9d, 0x101, 0x3], 0x2}}, 0x1}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000100)) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000000), 0x1, 0x400940) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/95}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x6, 0x6, 0x1, {0x2, @sliced={0x8, [0xffff, 0x9, 0x7fff, 0x8, 0x3, 0x3, 0x1ff, 0x1, 0x5, 0x1000, 0x3f, 0xfffe, 0x1, 0x4, 0x0, 0x3, 0xd7, 0x1, 0x5765, 0x7, 0x400, 0x81, 0xfff, 0x8, 0x101, 0x3, 0x4, 0x800, 0x20, 0x6, 0x0, 0x0, 0x3, 0xffff, 0x2, 0x1, 0x8, 0xe424, 0x6, 0x85, 0xb456, 0x5, 0x4c1, 0x4, 0x3c00, 0x9d, 0x101, 0x3], 0x2}}, 0x1}) (async) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000100)) (async) 23:03:59 executing program 0: r0 = socket(0x0, 0x4, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 4: socket(0x9, 0x800, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x9}, 0x2f) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x9, 0x800, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x9}, 0x2f) (async) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) 23:03:59 executing program 3: syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 23:03:59 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x7) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x3, 0xc02, 0x2, {0x1, @sdr={0x32314d59, 0x6}}, 0x101}) (async, rerun: 32) r2 = getpid() (rerun: 32) syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/mnt\x00') (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000200)) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x200}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) (async) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000300)={{0x3, 0x2, 0xfffffff9, 0x1, 0x4}, 0x100000001, 0x10001, 0x1}) ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x7) 23:03:59 executing program 4: socket(0x9, 0x800, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x9}, 0x2f) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x9, 0x800, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x9}, 0x2f) (async) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) 23:03:59 executing program 3: syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:59 executing program 0: r0 = socket(0x18, 0x0, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async, rerun: 32) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) (rerun: 32) 23:03:59 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) sendmsg$rds(r1, &(0x7f0000001ac0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000040)=""/236, 0xec}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/199, 0xc7}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/236, 0xec}], 0x6, &(0x7f0000001840)=[@cswp={0x58, 0x114, 0x7, {{0x1c000, 0x1}, &(0x7f00000014c0)=0x7277, &(0x7f0000001500)=0x8, 0x1ff, 0x7, 0xffffffffffffff28, 0x8, 0x10, 0x7fffffff}}, @cswp={0x58, 0x114, 0x7, {{0x8, 0x2}, &(0x7f0000001540)=0x6, &(0x7f0000001580)=0x6, 0x8, 0x5, 0x9, 0x4, 0x20, 0x200}}, @fadd={0x58, 0x114, 0x6, {{0xff, 0x2}, &(0x7f00000015c0)=0x401, &(0x7f0000001600)=0x9, 0x2, 0x20, 0x8, 0xfff, 0x60, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x7}, &(0x7f0000001640)=0x3, &(0x7f0000001680)=0x4, 0x4, 0x200, 0xc9, 0x6, 0x0, 0xb81d}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x3}, &(0x7f00000016c0)=0x7fff, &(0x7f0000001700)=0x1a, 0x0, 0x100000000, 0x6, 0xfffffffffffffbff, 0x0, 0x4c1f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x20}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x3ff}, &(0x7f0000001740)=0xfffffffffffffffa, &(0x7f0000001780)=0x3, 0x6, 0x7fff, 0x2e9, 0x6, 0x4, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x5}, &(0x7f00000017c0)=0x9, &(0x7f0000001800)=0x6, 0x4, 0x9, 0x1, 0x0, 0x4a, 0xfffffffffffffffc}}], 0x280, 0x2f55588a1d22283e}, 0x48000) 23:03:59 executing program 3: syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:59 executing program 0: r0 = socket(0x18, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x62, &(0x7f0000000080)=""/98, 0x41100, 0xa, '\x00', r0, 0x25, r1, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x8, 0xa9, 0x287}, 0x10}, 0x80) socket(0x1d, 0x3, 0x1) 23:03:59 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) sendmsg$rds(r1, &(0x7f0000001ac0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000040)=""/236, 0xec}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/199, 0xc7}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/236, 0xec}], 0x6, &(0x7f0000001840)=[@cswp={0x58, 0x114, 0x7, {{0x1c000, 0x1}, &(0x7f00000014c0)=0x7277, &(0x7f0000001500)=0x8, 0x1ff, 0x7, 0xffffffffffffff28, 0x8, 0x10, 0x7fffffff}}, @cswp={0x58, 0x114, 0x7, {{0x8, 0x2}, &(0x7f0000001540)=0x6, &(0x7f0000001580)=0x6, 0x8, 0x5, 0x9, 0x4, 0x20, 0x200}}, @fadd={0x58, 0x114, 0x6, {{0xff, 0x2}, &(0x7f00000015c0)=0x401, &(0x7f0000001600)=0x9, 0x2, 0x20, 0x8, 0xfff, 0x60, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x7}, &(0x7f0000001640)=0x3, &(0x7f0000001680)=0x4, 0x4, 0x200, 0xc9, 0x6, 0x0, 0xb81d}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x3}, &(0x7f00000016c0)=0x7fff, &(0x7f0000001700)=0x1a, 0x0, 0x100000000, 0x6, 0xfffffffffffffbff, 0x0, 0x4c1f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x20}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x3ff}, &(0x7f0000001740)=0xfffffffffffffffa, &(0x7f0000001780)=0x3, 0x6, 0x7fff, 0x2e9, 0x6, 0x4, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x5}, &(0x7f00000017c0)=0x9, &(0x7f0000001800)=0x6, 0x4, 0x9, 0x1, 0x0, 0x4a, 0xfffffffffffffffc}}], 0x280, 0x2f55588a1d22283e}, 0x48000) 23:03:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 23:03:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 23:03:59 executing program 0: r0 = socket(0x18, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) sendmsg$rds(r1, &(0x7f0000001ac0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000040)=""/236, 0xec}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/199, 0xc7}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/236, 0xec}], 0x6, &(0x7f0000001840)=[@cswp={0x58, 0x114, 0x7, {{0x1c000, 0x1}, &(0x7f00000014c0)=0x7277, &(0x7f0000001500)=0x8, 0x1ff, 0x7, 0xffffffffffffff28, 0x8, 0x10, 0x7fffffff}}, @cswp={0x58, 0x114, 0x7, {{0x8, 0x2}, &(0x7f0000001540)=0x6, &(0x7f0000001580)=0x6, 0x8, 0x5, 0x9, 0x4, 0x20, 0x200}}, @fadd={0x58, 0x114, 0x6, {{0xff, 0x2}, &(0x7f00000015c0)=0x401, &(0x7f0000001600)=0x9, 0x2, 0x20, 0x8, 0xfff, 0x60, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x7}, &(0x7f0000001640)=0x3, &(0x7f0000001680)=0x4, 0x4, 0x200, 0xc9, 0x6, 0x0, 0xb81d}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x3}, &(0x7f00000016c0)=0x7fff, &(0x7f0000001700)=0x1a, 0x0, 0x100000000, 0x6, 0xfffffffffffffbff, 0x0, 0x4c1f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x20}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x3ff}, &(0x7f0000001740)=0xfffffffffffffffa, &(0x7f0000001780)=0x3, 0x6, 0x7fff, 0x2e9, 0x6, 0x4, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x5}, &(0x7f00000017c0)=0x9, &(0x7f0000001800)=0x6, 0x4, 0x9, 0x1, 0x0, 0x4a, 0xfffffffffffffffc}}], 0x280, 0x2f55588a1d22283e}, 0x48000) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) sendmsg$rds(r1, &(0x7f0000001ac0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000040)=""/236, 0xec}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/199, 0xc7}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/236, 0xec}], 0x6, &(0x7f0000001840)=[@cswp={0x58, 0x114, 0x7, {{0x1c000, 0x1}, &(0x7f00000014c0)=0x7277, &(0x7f0000001500)=0x8, 0x1ff, 0x7, 0xffffffffffffff28, 0x8, 0x10, 0x7fffffff}}, @cswp={0x58, 0x114, 0x7, {{0x8, 0x2}, &(0x7f0000001540)=0x6, &(0x7f0000001580)=0x6, 0x8, 0x5, 0x9, 0x4, 0x20, 0x200}}, @fadd={0x58, 0x114, 0x6, {{0xff, 0x2}, &(0x7f00000015c0)=0x401, &(0x7f0000001600)=0x9, 0x2, 0x20, 0x8, 0xfff, 0x60, 0x9}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x7}, &(0x7f0000001640)=0x3, &(0x7f0000001680)=0x4, 0x4, 0x200, 0xc9, 0x6, 0x0, 0xb81d}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x3}, &(0x7f00000016c0)=0x7fff, &(0x7f0000001700)=0x1a, 0x0, 0x100000000, 0x6, 0xfffffffffffffbff, 0x0, 0x4c1f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x20}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x3ff}, &(0x7f0000001740)=0xfffffffffffffffa, &(0x7f0000001780)=0x3, 0x6, 0x7fff, 0x2e9, 0x6, 0x4, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x5}, &(0x7f00000017c0)=0x9, &(0x7f0000001800)=0x6, 0x4, 0x9, 0x1, 0x0, 0x4a, 0xfffffffffffffffc}}], 0x280, 0x2f55588a1d22283e}, 0x48000) (async) 23:03:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:59 executing program 1: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:59 executing program 0: r0 = socket(0x18, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x62, &(0x7f0000000080)=""/98, 0x41100, 0xa, '\x00', r0, 0x25, r1, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x8, 0xa9, 0x287}, 0x10}, 0x80) (async) socket(0x1d, 0x3, 0x1) 23:03:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 23:03:59 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000180)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fdde36db6e30ea3f3fba44d32ba465aacb7faeeabdab701e654a7cbea071354cec66c961fb4078aa2ecd2333ae263a7877e8037d5333aab08d161090b28c7fce1e07001b06007de7972c5265c22c59d0f1608c81513351150f9b235526a7487282dbd0cbd97773123448a353bcea2a23", @ANYRES16=0x0, @ANYBLOB="0000000000000000000003000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:59 executing program 0: socket(0x18, 0x0, 0x1) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 1: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:59 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000180)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fdde36db6e30ea3f3fba44d32ba465aacb7faeeabdab701e654a7cbea071354cec66c961fb4078aa2ecd2333ae263a7877e8037d5333aab08d161090b28c7fce1e07001b06007de7972c5265c22c59d0f1608c81513351150f9b235526a7487282dbd0cbd97773123448a353bcea2a23", @ANYRES16=0x0, @ANYBLOB="0000000000000000000003000000"], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 23:03:59 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x62, &(0x7f0000000080)=""/98, 0x41100, 0xa, '\x00', r0, 0x25, r1, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x8, 0xa9, 0x287}, 0x10}, 0x80) socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x62, &(0x7f0000000080)=""/98, 0x41100, 0xa, '\x00', r0, 0x25, r1, 0x8, &(0x7f0000000140)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x8, 0xa9, 0x287}, 0x10}, 0x80) (async) socket(0x1d, 0x3, 0x1) (async) 23:03:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x1, 0x1, 0x4, {0x2, @sdr={0x6017092c, 0x2}}, 0x3}) 23:03:59 executing program 1: ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:03:59 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000180)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fdde36db6e30ea3f3fba44d32ba465aacb7faeeabdab701e654a7cbea071354cec66c961fb4078aa2ecd2333ae263a7877e8037d5333aab08d161090b28c7fce1e07001b06007de7972c5265c22c59d0f1608c81513351150f9b235526a7487282dbd0cbd97773123448a353bcea2a23", @ANYRES16=0x0, @ANYBLOB="0000000000000000000003000000"], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'lo\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x1, 0x1, 0x4, {0x2, @sdr={0x6017092c, 0x2}}, 0x3}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x1, 0x1, 0x4, {0x2, @sdr={0x6017092c, 0x2}}, 0x3}) (async) 23:03:59 executing program 0: socket(0x18, 0x0, 0x1) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 4: socket(0x1d, 0x3, 0x1) socket(0x2c, 0x80000, 0xfff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x800, @null, @rose={'rose', 0x0}, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default]}) 23:03:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@overlay={0x1, 0x1, 0x4, 0x10000, 0x9, {}, {0x1, 0xc, 0x6, 0x5, 0x8, 0x5, "8afd4c1d"}, 0x8, 0x3, {}, 0x231}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40002080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000128bd7000fbdbdf2501000033c99a1ddf35d9e089"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) 23:03:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:59 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 23:03:59 executing program 0: socket(0x18, 0x0, 0x1) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x1, 0x1, 0x4, {0x2, @sdr={0x6017092c, 0x2}}, 0x3}) 23:03:59 executing program 4: socket(0x1d, 0x3, 0x1) (async) socket(0x2c, 0x80000, 0xfff) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x800, @null, @rose={'rose', 0x0}, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default]}) 23:03:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:59 executing program 0: r0 = socket(0x18, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async, rerun: 64) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async, rerun: 32) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@overlay={0x1, 0x1, 0x4, 0x10000, 0x9, {}, {0x1, 0xc, 0x6, 0x5, 0x8, 0x5, "8afd4c1d"}, 0x8, 0x3, {}, 0x231}) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40002080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000128bd7000fbdbdf2501000033c99a1ddf35d9e089"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) 23:03:59 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x2, @loopback}}, 0x1e) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:59 executing program 4: socket(0x1d, 0x3, 0x1) socket(0x2c, 0x80000, 0xfff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x800, @null, @rose={'rose', 0x0}, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default]}) 23:03:59 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 23:03:59 executing program 0: r0 = socket(0x18, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x2, @loopback}}, 0x1e) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:59 executing program 4: socket(0x1d, 0x3, 0x1) socket(0x29, 0x5, 0x8) 23:03:59 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 23:03:59 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@overlay={0x1, 0x1, 0x4, 0x10000, 0x9, {}, {0x1, 0xc, 0x6, 0x5, 0x8, 0x5, "8afd4c1d"}, 0x8, 0x3, {}, 0x231}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40002080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000128bd7000fbdbdf2501000033c99a1ddf35d9e089"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) 23:03:59 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x4, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:03:59 executing program 0: r0 = socket(0x18, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:03:59 executing program 4: socket(0x1d, 0x3, 0x1) socket(0x29, 0x5, 0x8) socket(0x1d, 0x3, 0x1) (async) socket(0x29, 0x5, 0x8) (async) 23:03:59 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x2, @loopback}}, 0x1e) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:03:59 executing program 0: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:04:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x200000b1}, 0x4004801) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:00 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40041550}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r1 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0xb00, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x20004045) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xece846389b2d2fee}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, 0x1, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc0000000}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7619}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x800) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x0, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 0: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:04:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) 23:04:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x200000b1}, 0x4004801) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:00 executing program 4: socket(0x1d, 0x3, 0x1) (async) socket(0x29, 0x5, 0x8) 23:04:00 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40041550}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r1 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0xb00, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x20004045) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xece846389b2d2fee}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, 0x1, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc0000000}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7619}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x800) 23:04:00 executing program 0: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x0, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x1) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) 23:04:00 executing program 4: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x4880) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x0, {0x1, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x200000b1}, 0x4004801) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:00 executing program 0: r0 = socket(0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:00 executing program 4: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x4880) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x4880) (async) 23:04:00 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40041550}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) r1 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0xb00, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x20004045) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xece846389b2d2fee}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, 0x1, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc0000000}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7619}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x800) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x0, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 0: r0 = socket(0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:00 executing program 4: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x4880) 23:04:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x78a9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x1, 0x0, 0x3, 0x0, 0x7}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x10) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@multiplanar_fd={0x3, 0x2, 0x4, 0x70000, 0x400, {0x0, 0x2710}, {0x1, 0x1, 0x64, 0x6, 0x4, 0x3f, "f773ad94"}, 0x8d0a, 0x4, {&(0x7f0000000100)=[{0x9, 0x0, {r2}, 0xfbe6}, {0x1, 0x101, {}, 0xd7c2}]}, 0x1}) 23:04:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) 23:04:00 executing program 5: r0 = socket(0x9, 0x80000, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x0, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 4: socket(0x1d, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80e00}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x24000004) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000) 23:04:00 executing program 0: r0 = socket(0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) read$ptp(0xffffffffffffffff, &(0x7f00000000c0), 0x0) 23:04:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x78a9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x1, 0x0, 0x3, 0x0, 0x7}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@multiplanar_fd={0x3, 0x2, 0x4, 0x70000, 0x400, {0x0, 0x2710}, {0x1, 0x1, 0x64, 0x6, 0x4, 0x3f, "f773ad94"}, 0x8d0a, 0x4, {&(0x7f0000000100)=[{0x9, 0x0, {r2}, 0xfbe6}, {0x1, 0x101, {}, 0xd7c2}]}, 0x1}) 23:04:00 executing program 5: r0 = socket(0x9, 0x80000, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:00 executing program 4: socket(0x1d, 0x3, 0x1) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80e00}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x24000004) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x0, @win={{0x0, 0x7c, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) read$ptp(0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) socket$rds(0x15, 0x5, 0x0) (async) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) (async) read$ptp(0xffffffffffffffff, &(0x7f00000000c0), 0x0) (async) 23:04:00 executing program 5: r0 = socket(0x9, 0x80000, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:00 executing program 4: socket(0x1d, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80e00}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x24000004) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000) socket(0x1d, 0x3, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80e00}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x24000004) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000) (async) 23:04:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x78a9, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x1, 0x0, 0x3, 0x0, 0x7}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x9, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)=@multiplanar_fd={0x3, 0x2, 0x4, 0x70000, 0x400, {0x0, 0x2710}, {0x1, 0x1, 0x64, 0x6, 0x4, 0x3f, "f773ad94"}, 0x8d0a, 0x4, {&(0x7f0000000100)=[{0x9, 0x0, {r2}, 0xfbe6}, {0x1, 0x101, {}, 0xd7c2}]}, 0x1}) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x0, 0x7, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 0: socket(0x18, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:04:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) read$ptp(0xffffffffffffffff, &(0x7f00000000c0), 0x0) 23:04:00 executing program 1: syslog(0xa, &(0x7f00000000c0)=""/4096, 0x1000) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000010c0)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:00 executing program 0: socket(0x18, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:04:00 executing program 0: socket(0x18, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:04:00 executing program 1: syslog(0xa, &(0x7f00000000c0)=""/4096, 0x1000) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000010c0)=0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{0x0, 0x0, 0x0, 0xcf6}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfffffbff, 0xfff, 0x80000000, 0x2, r0, 0x3, '\x00', r1, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0xd}, 0x48) r2 = socket(0x1d, 0x3, 0x1) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xe9, 0x5, 0x84, 0x8c9, 0xffffffffffffffff, 0x3, '\x00', 0x0, r4, 0x5, 0x2, 0x1, 0x2}, 0x48) r5 = syz_open_dev$audion(&(0x7f00000001c0), 0x108e, 0x4000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x3}, @increfs={0x40046304, 0x3}], 0xef, 0x0, &(0x7f0000000240)="06c860704465137790c20dcbf550b4e7dcdaed62ce7cd0a20f1b45fbfaddbc9038fef5e40ae9f68db3519cbf6a457843b947e270c83b6bd34941e672adedf6738a9d7a66702013d02b6e0d06338266986fe6c276606f3b5b10af80eb9db600da97fe5c384ab3983df4bb4e4b461a44f0fc033b148df6f249ea097c8b707e0c18b8a2f04655a8756cadf0745c2fca73de4de1ed108a1185bf8c5e4f201d72862c81ff2ec0a6ba0a6b7c0dac704aef6f3490bef4752da50f28a4fe8ce9009a39fd8a90472f51c9015acb19e3c27db9d5d347e3c6ae6fe742593edb06ea295145f73adf168f90f0343744aa9f1948206a"}) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) 23:04:00 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x4c}}, 0x0) 23:04:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)=@mmap={0x3, 0x2, 0x4, 0x4000, 0x5, {0x77359400}, {0x4, 0xc, 0x6, 0x2, 0xd5, 0x1, "ada1305e"}, 0x1, 0x1, {}, 0xff, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:00 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x2, @loopback}}, 0x1e) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:00 executing program 1: syslog(0xa, &(0x7f00000000c0)=""/4096, 0x1000) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000010c0)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:00 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) (rerun: 64) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async, rerun: 64) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x4c}}, 0x0) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{}, 0x4, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 23:04:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)=@mmap={0x3, 0x2, 0x4, 0x4000, 0x5, {0x77359400}, {0x4, 0xc, 0x6, 0x2, 0xd5, 0x1, "ada1305e"}, 0x1, 0x1, {}, 0xff, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)=@mmap={0x3, 0x2, 0x4, 0x4000, 0x5, {0x77359400}, {0x4, 0xc, 0x6, 0x2, 0xd5, 0x1, "ada1305e"}, 0x1, 0x1, {}, 0xff, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:04:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000002c0)={0x10001, 0x8001, 0x4, {0x2, @sliced={0x3a4, [0x8, 0x6, 0xc0, 0x3cd9, 0x5, 0x3, 0xf57, 0x0, 0x2, 0x9, 0xbee, 0xfffc, 0x401, 0x1, 0x4, 0x2, 0x2ae, 0x8000, 0x3, 0x3ff, 0x9, 0x6, 0x8, 0xa78, 0x2, 0x5, 0x80, 0xe85, 0x8001, 0x101, 0x6, 0x3f, 0x3, 0x1, 0x80, 0x3, 0x6, 0xdb7, 0x0, 0x1, 0x20, 0x200, 0x1, 0xffff, 0x7, 0x9, 0x1ff, 0x4], 0x6}}, 0x80000001}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_fd={0x1, 0x0, 0x4, 0x4000, 0x2, {0x77359400}, {0x2, 0x1, 0x2, 0x3, 0x7, 0xe5, "9bae31f9"}, 0x7, 0x4, {&(0x7f00000000c0)=[{0x1, 0x101, {r4}, 0xab1}, {0x3, 0x1, {}, 0x6}]}, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x80) 23:04:00 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfffffbff, 0xfff, 0x80000000, 0x2, r0, 0x3, '\x00', r1, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0xd}, 0x48) r2 = socket(0x1d, 0x3, 0x1) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xe9, 0x5, 0x84, 0x8c9, 0xffffffffffffffff, 0x3, '\x00', 0x0, r4, 0x5, 0x2, 0x1, 0x2}, 0x48) r5 = syz_open_dev$audion(&(0x7f00000001c0), 0x108e, 0x4000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x3}, @increfs={0x40046304, 0x3}], 0xef, 0x0, &(0x7f0000000240)="06c860704465137790c20dcbf550b4e7dcdaed62ce7cd0a20f1b45fbfaddbc9038fef5e40ae9f68db3519cbf6a457843b947e270c83b6bd34941e672adedf6738a9d7a66702013d02b6e0d06338266986fe6c276606f3b5b10af80eb9db600da97fe5c384ab3983df4bb4e4b461a44f0fc033b148df6f249ea097c8b707e0c18b8a2f04655a8756cadf0745c2fca73de4de1ed108a1185bf8c5e4f201d72862c81ff2ec0a6ba0a6b7c0dac704aef6f3490bef4752da50f28a4fe8ce9009a39fd8a90472f51c9015acb19e3c27db9d5d347e3c6ae6fe742593edb06ea295145f73adf168f90f0343744aa9f1948206a"}) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfffffbff, 0xfff, 0x80000000, 0x2, r0, 0x3, '\x00', r1, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0xd}, 0x48) (async) socket(0x1d, 0x3, 0x1) (async) socket$pptp(0x18, 0x1, 0x2) (async) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x1, @loopback}}, 0x1e) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xe9, 0x5, 0x84, 0x8c9, 0xffffffffffffffff, 0x3, '\x00', 0x0, r4, 0x5, 0x2, 0x1, 0x2}, 0x48) (async) syz_open_dev$audion(&(0x7f00000001c0), 0x108e, 0x4000) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x3}, @increfs={0x40046304, 0x3}], 0xef, 0x0, &(0x7f0000000240)="06c860704465137790c20dcbf550b4e7dcdaed62ce7cd0a20f1b45fbfaddbc9038fef5e40ae9f68db3519cbf6a457843b947e270c83b6bd34941e672adedf6738a9d7a66702013d02b6e0d06338266986fe6c276606f3b5b10af80eb9db600da97fe5c384ab3983df4bb4e4b461a44f0fc033b148df6f249ea097c8b707e0c18b8a2f04655a8756cadf0745c2fca73de4de1ed108a1185bf8c5e4f201d72862c81ff2ec0a6ba0a6b7c0dac704aef6f3490bef4752da50f28a4fe8ce9009a39fd8a90472f51c9015acb19e3c27db9d5d347e3c6ae6fe742593edb06ea295145f73adf168f90f0343744aa9f1948206a"}) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) (async) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{}, 0x0, 0x2, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 23:04:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)=@mmap={0x3, 0x2, 0x4, 0x4000, 0x5, {0x77359400}, {0x4, 0xc, 0x6, 0x2, 0xd5, 0x1, "ada1305e"}, 0x1, 0x1, {}, 0xff, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000002c0)={0x10001, 0x8001, 0x4, {0x2, @sliced={0x3a4, [0x8, 0x6, 0xc0, 0x3cd9, 0x5, 0x3, 0xf57, 0x0, 0x2, 0x9, 0xbee, 0xfffc, 0x401, 0x1, 0x4, 0x2, 0x2ae, 0x8000, 0x3, 0x3ff, 0x9, 0x6, 0x8, 0xa78, 0x2, 0x5, 0x80, 0xe85, 0x8001, 0x101, 0x6, 0x3f, 0x3, 0x1, 0x80, 0x3, 0x6, 0xdb7, 0x0, 0x1, 0x20, 0x200, 0x1, 0xffff, 0x7, 0x9, 0x1ff, 0x4], 0x6}}, 0x80000001}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_fd={0x1, 0x0, 0x4, 0x4000, 0x2, {0x77359400}, {0x2, 0x1, 0x2, 0x3, 0x7, 0xe5, "9bae31f9"}, 0x7, 0x4, {&(0x7f00000000c0)=[{0x1, 0x101, {r4}, 0xab1}, {0x3, 0x1, {}, 0x6}]}, 0x5}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x80) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{}, 0x0, 0x0, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) 23:04:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5, 0x400000) 23:04:00 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) (rerun: 32) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async, rerun: 64) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x4c}}, 0x0) 23:04:00 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfffffbff, 0xfff, 0x80000000, 0x2, r0, 0x3, '\x00', r1, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0xd}, 0x48) r2 = socket(0x1d, 0x3, 0x1) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x1, @loopback}}, 0x1e) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xe9, 0x5, 0x84, 0x8c9, 0xffffffffffffffff, 0x3, '\x00', 0x0, r4, 0x5, 0x2, 0x1, 0x2}, 0x48) r5 = syz_open_dev$audion(&(0x7f00000001c0), 0x108e, 0x4000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x3}, @increfs={0x40046304, 0x3}], 0xef, 0x0, &(0x7f0000000240)="06c860704465137790c20dcbf550b4e7dcdaed62ce7cd0a20f1b45fbfaddbc9038fef5e40ae9f68db3519cbf6a457843b947e270c83b6bd34941e672adedf6738a9d7a66702013d02b6e0d06338266986fe6c276606f3b5b10af80eb9db600da97fe5c384ab3983df4bb4e4b461a44f0fc033b148df6f249ea097c8b707e0c18b8a2f04655a8756cadf0745c2fca73de4de1ed108a1185bf8c5e4f201d72862c81ff2ec0a6ba0a6b7c0dac704aef6f3490bef4752da50f28a4fe8ce9009a39fd8a90472f51c9015acb19e3c27db9d5d347e3c6ae6fe742593edb06ea295145f73adf168f90f0343744aa9f1948206a"}) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xfffffbff, 0xfff, 0x80000000, 0x2, r0, 0x3, '\x00', r1, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0xd}, 0x48) (async) socket(0x1d, 0x3, 0x1) (async) socket$pptp(0x18, 0x1, 0x2) (async) connect$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x1, @loopback}}, 0x1e) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xe9, 0x5, 0x84, 0x8c9, 0xffffffffffffffff, 0x3, '\x00', 0x0, r4, 0x5, 0x2, 0x1, 0x2}, 0x48) (async) syz_open_dev$audion(&(0x7f00000001c0), 0x108e, 0x4000) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x3}, @increfs={0x40046304, 0x3}], 0xef, 0x0, &(0x7f0000000240)="06c860704465137790c20dcbf550b4e7dcdaed62ce7cd0a20f1b45fbfaddbc9038fef5e40ae9f68db3519cbf6a457843b947e270c83b6bd34941e672adedf6738a9d7a66702013d02b6e0d06338266986fe6c276606f3b5b10af80eb9db600da97fe5c384ab3983df4bb4e4b461a44f0fc033b148df6f249ea097c8b707e0c18b8a2f04655a8756cadf0745c2fca73de4de1ed108a1185bf8c5e4f201d72862c81ff2ec0a6ba0a6b7c0dac704aef6f3490bef4752da50f28a4fe8ce9009a39fd8a90472f51c9015acb19e3c27db9d5d347e3c6ae6fe742593edb06ea295145f73adf168f90f0343744aa9f1948206a"}) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) (async) 23:04:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000000c0)={0x13}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{}, 0x0, 0x0, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000002c0)={0x10001, 0x8001, 0x4, {0x2, @sliced={0x3a4, [0x8, 0x6, 0xc0, 0x3cd9, 0x5, 0x3, 0xf57, 0x0, 0x2, 0x9, 0xbee, 0xfffc, 0x401, 0x1, 0x4, 0x2, 0x2ae, 0x8000, 0x3, 0x3ff, 0x9, 0x6, 0x8, 0xa78, 0x2, 0x5, 0x80, 0xe85, 0x8001, 0x101, 0x6, 0x3f, 0x3, 0x1, 0x80, 0x3, 0x6, 0xdb7, 0x0, 0x1, 0x20, 0x200, 0x1, 0xffff, 0x7, 0x9, 0x1ff, 0x4], 0x6}}, 0x80000001}) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)=@multiplanar_fd={0x1, 0x0, 0x4, 0x4000, 0x2, {0x77359400}, {0x2, 0x1, 0x2, 0x3, 0x7, 0xe5, "9bae31f9"}, 0x7, 0x4, {&(0x7f00000000c0)=[{0x1, 0x101, {r4}, 0xab1}, {0x3, 0x1, {}, 0x6}]}, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x4000010, r1, 0x80) 23:04:00 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5, 0x400000) 23:04:00 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{}, 0x0, 0x0, &(0x7f0000000240)={{0x8066, 0x80000001, 0xc2, 0x100}, &(0x7f0000000200)={{0x53, 0xfff, 0x8000, 0x287d}}}, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x8000) socket(0x1d, 0x3, 0x1) 23:04:00 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) socket(0x1d, 0x3, 0x1) 23:04:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xc6, 0x2, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x4, 0x4}) 23:04:01 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) socket(0x1d, 0x3, 0x1) 23:04:01 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5, 0x400000) 23:04:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xc6, 0x2, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x4, 0x4}) 23:04:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x8000) (async) socket(0x1d, 0x3, 0x1) 23:04:01 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{}, 0x0, 0x2, 0x0, 0x9, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:01 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x7, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x80, 0x20, 0x9}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000048}, 0x8840) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001480)={&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, &(0x7f0000001400)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0x81}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x3f}, {&(0x7f0000001640)=""/217, 0xd9}, &(0x7f00000013c0)=[{&(0x7f0000000380)=""/56, 0x38}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, 0x40, 0x6}}], 0x60, 0x800}, 0x40080) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:01 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) socket(0x1d, 0x3, 0x1) 23:04:01 executing program 2: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) getpgrp(r1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xc6, 0x2, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x4, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xc6, 0x2, 0x1, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x4, 0x4}) (async) 23:04:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x8000) (async) socket(0x1d, 0x3, 0x1) 23:04:01 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{}, 0x0, 0x2, 0x0, 0x0, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:01 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x7, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x80, 0x20, 0x9}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000048}, 0x8840) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001480)={&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, &(0x7f0000001400)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0x81}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x3f}, {&(0x7f0000001640)=""/217, 0xd9}, &(0x7f00000013c0)=[{&(0x7f0000000380)=""/56, 0x38}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, 0x40, 0x6}}], 0x60, 0x800}, 0x40080) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:01 executing program 2: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) getpgrp(r1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) gettid() (async) syz_open_procfs$namespace(r0, 0x0) (async) gettid() (async) syz_open_procfs$namespace(r1, 0x0) (async) getpgrp(r1) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:04:01 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:01 executing program 4: setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x4) socket(0x1d, 0x3, 0x1) 23:04:01 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) syslog(0x2, &(0x7f0000000100)=""/104, 0x68) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f00000000c0)) connect$nfc_raw(r1, &(0x7f0000000400)={0x27, 0x0, 0x0, 0x7}, 0x10) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xb5c}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040840}, 0x4004001) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x40) 23:04:01 executing program 0: recvfrom$rose(0xffffffffffffffff, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:01 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0xff}) 23:04:01 executing program 2: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) (async, rerun: 64) r1 = gettid() (rerun: 64) syz_open_procfs$namespace(r1, 0x0) (async) getpgrp(r1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:01 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x7, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x80, 0x20, 0x9}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000048}, 0x8840) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001480)={&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, &(0x7f0000001400)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0x81}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x3f}, {&(0x7f0000001640)=""/217, 0xd9}, &(0x7f00000013c0)=[{&(0x7f0000000380)=""/56, 0x38}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, 0x40, 0x6}}], 0x60, 0x800}, 0x40080) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x7, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x80, 0x20, 0x9}}) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000048}, 0x8840) (async) socket$rds(0x15, 0x5, 0x0) (async) sendmsg$rds(r2, &(0x7f0000001480)={&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, &(0x7f0000001400)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0x81}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x3f}, {&(0x7f0000001640)=""/217, 0xd9}, &(0x7f00000013c0)=[{&(0x7f0000000380)=""/56, 0x38}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, 0x40, 0x6}}], 0x60, 0x800}, 0x40080) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) (async) 23:04:01 executing program 0: recvfrom$rose(0xffffffffffffffff, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:01 executing program 4: setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x4) socket(0x1d, 0x3, 0x1) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x4) (async) socket(0x1d, 0x3, 0x1) (async) 23:04:01 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{}, 0x0, 0x2, 0x0, 0x0, 0x0}}, 0xff}) 23:04:01 executing program 0: recvfrom$rose(0xffffffffffffffff, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:01 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{}, 0x0, 0x2, 0x0, 0x0, 0x0}}}) 23:04:01 executing program 0: r0 = socket(0x0, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:01 executing program 5: r0 = socket(0x2b, 0x5, 0xfffffffd) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 'ip6gretap0\x00'}}, 0x1e) 23:04:02 executing program 4: setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x4) (async) socket(0x1d, 0x3, 0x1) 23:04:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2) 23:04:02 executing program 5: r0 = socket(0x2b, 0x5, 0xfffffffd) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 'ip6gretap0\x00'}}, 0x1e) socket(0x2b, 0x5, 0xfffffffd) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 'ip6gretap0\x00'}}, 0x1e) (async) 23:04:02 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) syslog(0x2, &(0x7f0000000100)=""/104, 0x68) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f00000000c0)) (async) connect$nfc_raw(r1, &(0x7f0000000400)={0x27, 0x0, 0x0, 0x7}, 0x10) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xb5c}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040840}, 0x4004001) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x40) 23:04:02 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0xfffffeff, 0x4, {0x1, @win={{}, 0x0, 0x2, 0x0, 0x0, &(0x7f0000000280)="120c932ea23ffdc0d0ace2fc9d17db6494afabf55d35af55ea150d99bf963d1ef0cf86a9877e6f55cfdca6915cbb90f3903691f763bac6d6bdc5a8ba1b5362d975e786851fcb1c2411e026acf8a05fe9876cf2ea36db012dc305cf26570f8afae55236226ebd79b718a4792dfadede951012514d025ad689ddabe89b033d2cd223f238e75fb14b2af5acd32fd2b5c0d11d0de445c7", 0x1}}, 0xff}) 23:04:02 executing program 0: r0 = socket(0x0, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:02 executing program 5: r0 = socket(0x2b, 0x5, 0xfffffffd) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 'ip6gretap0\x00'}}, 0x1e) socket(0x2b, 0x5, 0xfffffffd) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 'ip6gretap0\x00'}}, 0x1e) (async) 23:04:02 executing program 3: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:02 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4008855) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x401) 23:04:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2) (async) 23:04:02 executing program 0: r0 = socket(0x0, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:02 executing program 5: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:02 executing program 4: socket(0x1d, 0x3, 0x1) (async) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4008855) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x401) 23:04:02 executing program 3: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x1ff, 0x2) 23:04:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) syslog(0x2, &(0x7f0000000100)=""/104, 0x68) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f00000000c0)) connect$nfc_raw(r1, &(0x7f0000000400)={0x27, 0x0, 0x0, 0x7}, 0x10) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xb5c}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040840}, 0x4004001) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x40) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) syslog(0x2, &(0x7f0000000100)=""/104, 0x68) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f00000000c0)) (async) connect$nfc_raw(r1, &(0x7f0000000400)={0x27, 0x0, 0x0, 0x7}, 0x10) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xb5c}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040840}, 0x4004001) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x40) (async) 23:04:03 executing program 5: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:03 executing program 0: r0 = socket(0xf, 0x0, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:03 executing program 4: socket(0x1d, 0x3, 0x1) (async) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c000}, 0x4008855) (async, rerun: 32) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x401) (rerun: 32) 23:04:03 executing program 3: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:03 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x5, 0x1000, 0x4, {0x1, @raw_data="87a8ae83269acbf0d9c76ef7efe898e5853c98b9664eb05231804279335908fcbc68826a3168758fcd78c061be33c4b2e2479bc3a4e7b87f412a84ab3b11b8f64c3446786f0db803e026d25b87c098e796c7e4f4bfa6d3f620965d9cf38c1fbb295b2515c090b3c661e65a09e95dc5cb37b226f52a9a30b72462efe608c921563087e0e25b80448bd240901d5b96b59e895c9593c6bcb9c17f78b00ed186fba022d1ab39af78891ff90c3f158b41e27c4b9685a037432cbc00f6cc358d677cc17ed624f02bfcd2fe"}, 0x8003}) syz_open_dev$vim2m(&(0x7f0000000200), 0x20000000000000, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:03 executing program 5: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:04:03 executing program 0: r0 = socket(0xf, 0x0, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:03 executing program 3: socket(0xf, 0x3, 0x2) 23:04:03 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x5, 0x1000, 0x4, {0x1, @raw_data="87a8ae83269acbf0d9c76ef7efe898e5853c98b9664eb05231804279335908fcbc68826a3168758fcd78c061be33c4b2e2479bc3a4e7b87f412a84ab3b11b8f64c3446786f0db803e026d25b87c098e796c7e4f4bfa6d3f620965d9cf38c1fbb295b2515c090b3c661e65a09e95dc5cb37b226f52a9a30b72462efe608c921563087e0e25b80448bd240901d5b96b59e895c9593c6bcb9c17f78b00ed186fba022d1ab39af78891ff90c3f158b41e27c4b9685a037432cbc00f6cc358d677cc17ed624f02bfcd2fe"}, 0x8003}) (async) syz_open_dev$vim2m(&(0x7f0000000200), 0x20000000000000, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:03 executing program 4: socket(0x1d, 0x3, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') 23:04:03 executing program 0: r0 = socket(0xf, 0x0, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x0, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) 23:04:03 executing program 5: r0 = socket(0x21, 0x4, 0xf0) bind$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @default}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/49, 0x31, 0x1, 0x2a}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x2}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @exit_looper, @enter_looper, @exit_looper, @enter_looper, @free_buffer], 0x61, 0x0, &(0x7f0000000180)="92b8f2b4e2b60a6927954186c43eb3530bf45f0a0036f172da5c66c796e0bf027a4c52c45900317c1d5852d8cb4725b755d749782c116e1302afb99fc2c4fad3f3f4b36c460624b54345425a046fc733a256a137839c2c190b0d44722c7cd3a0f4"}) 23:04:03 executing program 3: socket(0x0, 0x3, 0x2) 23:04:03 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x5, 0x1000, 0x4, {0x1, @raw_data="87a8ae83269acbf0d9c76ef7efe898e5853c98b9664eb05231804279335908fcbc68826a3168758fcd78c061be33c4b2e2479bc3a4e7b87f412a84ab3b11b8f64c3446786f0db803e026d25b87c098e796c7e4f4bfa6d3f620965d9cf38c1fbb295b2515c090b3c661e65a09e95dc5cb37b226f52a9a30b72462efe608c921563087e0e25b80448bd240901d5b96b59e895c9593c6bcb9c17f78b00ed186fba022d1ab39af78891ff90c3f158b41e27c4b9685a037432cbc00f6cc358d677cc17ed624f02bfcd2fe"}, 0x8003}) syz_open_dev$vim2m(&(0x7f0000000200), 0x20000000000000, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x5, 0x1000, 0x4, {0x1, @raw_data="87a8ae83269acbf0d9c76ef7efe898e5853c98b9664eb05231804279335908fcbc68826a3168758fcd78c061be33c4b2e2479bc3a4e7b87f412a84ab3b11b8f64c3446786f0db803e026d25b87c098e796c7e4f4bfa6d3f620965d9cf38c1fbb295b2515c090b3c661e65a09e95dc5cb37b226f52a9a30b72462efe608c921563087e0e25b80448bd240901d5b96b59e895c9593c6bcb9c17f78b00ed186fba022d1ab39af78891ff90c3f158b41e27c4b9685a037432cbc00f6cc358d677cc17ed624f02bfcd2fe"}, 0x8003}) (async) syz_open_dev$vim2m(&(0x7f0000000200), 0x20000000000000, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:04:03 executing program 4: socket(0x1d, 0x3, 0x1) (async, rerun: 32) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') (rerun: 32) 23:04:03 executing program 0: r0 = socket(0xf, 0x3, 0x0) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:03 executing program 3: socket(0x0, 0x3, 0x2) 23:04:03 executing program 5: r0 = socket(0x21, 0x4, 0xf0) bind$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @default}, 0x1c) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/49, 0x31, 0x1, 0x2a}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x2}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @exit_looper, @enter_looper, @exit_looper, @enter_looper, @free_buffer], 0x61, 0x0, &(0x7f0000000180)="92b8f2b4e2b60a6927954186c43eb3530bf45f0a0036f172da5c66c796e0bf027a4c52c45900317c1d5852d8cb4725b755d749782c116e1302afb99fc2c4fad3f3f4b36c460624b54345425a046fc733a256a137839c2c190b0d44722c7cd3a0f4"}) 23:04:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x0, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) 23:04:03 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) 23:04:03 executing program 4: socket(0x1d, 0x3, 0x1) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') 23:04:03 executing program 0: r0 = socket(0xf, 0x3, 0x0) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:03 executing program 5: r0 = socket(0x21, 0x4, 0xf0) bind$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @default}, 0x1c) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/49, 0x31, 0x1, 0x2a}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x2}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}}, @exit_looper, @enter_looper, @exit_looper, @enter_looper, @free_buffer], 0x61, 0x0, &(0x7f0000000180)="92b8f2b4e2b60a6927954186c43eb3530bf45f0a0036f172da5c66c796e0bf027a4c52c45900317c1d5852d8cb4725b755d749782c116e1302afb99fc2c4fad3f3f4b36c460624b54345425a046fc733a256a137839c2c190b0d44722c7cd3a0f4"}) 23:04:03 executing program 3: socket(0x0, 0x3, 0x2) 23:04:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000001400060067656e6576653100000000000094cc14a1bc210bf6000000"], 0x30}, 0x1, 0x0, 0x0, 0x875}, 0x80) socket(0x1d, 0x3, 0x1) 23:04:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x0, 0x4}) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) 23:04:03 executing program 0: r0 = socket(0xf, 0x3, 0x0) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:03 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) 23:04:03 executing program 3: socket(0xf, 0x0, 0x2) 23:04:03 executing program 5: r0 = socket(0x2, 0x800, 0x0) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:initctl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x24040045) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 23:04:03 executing program 0: socket(0xf, 0x3, 0x2) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:03 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) 23:04:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000001400060067656e6576653100000000000094cc14a1bc210bf6000000"], 0x30}, 0x1, 0x0, 0x0, 0x875}, 0x80) (async) socket(0x1d, 0x3, 0x1) 23:04:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0xfff, 0x0, 0x4, 0x4000, 0x6, {}, {0x1, 0x8, 0xba, 0x87, 0x3f, 0xb2, "5fb283b2"}, 0x1, 0x2, {&(0x7f0000000140)=[{0x5a6a, 0xfffffc01, {&(0x7f00000000c0)}}, {0x5, 0x3, {&(0x7f0000000100)}, 0x81}]}, 0x3f}) 23:04:03 executing program 3: socket(0xf, 0x0, 0x2) 23:04:03 executing program 0: socket(0xf, 0x3, 0x2) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0xfff, 0x0, 0x4, 0x4000, 0x6, {}, {0x1, 0x8, 0xba, 0x87, 0x3f, 0xb2, "5fb283b2"}, 0x1, 0x2, {&(0x7f0000000140)=[{0x5a6a, 0xfffffc01, {&(0x7f00000000c0)}}, {0x5, 0x3, {&(0x7f0000000100)}, 0x81}]}, 0x3f}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0xfff, 0x0, 0x4, 0x4000, 0x6, {}, {0x1, 0x8, 0xba, 0x87, 0x3f, 0xb2, "5fb283b2"}, 0x1, 0x2, {&(0x7f0000000140)=[{0x5a6a, 0xfffffc01, {&(0x7f00000000c0)}}, {0x5, 0x3, {&(0x7f0000000100)}, 0x81}]}, 0x3f}) (async) 23:04:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x48004) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x3) 23:04:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd7000001400060067656e6576653100000000000094cc14a1bc210bf6000000"], 0x30}, 0x1, 0x0, 0x0, 0x875}, 0x80) socket(0x1d, 0x3, 0x1) 23:04:03 executing program 5: r0 = socket(0x2, 0x800, 0x0) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:initctl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x24040045) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) socket(0x2, 0x800, 0x0) (async) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:initctl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x24040045) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) 23:04:03 executing program 3: socket(0xf, 0x0, 0x2) 23:04:03 executing program 0: socket(0xf, 0x3, 0x2) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:03 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x48004) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x3) 23:04:03 executing program 4: socket(0x1d, 0x3, 0x1) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0xf3a, 0x7fff, 0x2000000}) 23:04:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@multiplanar_userptr={0xfff, 0x0, 0x4, 0x4000, 0x6, {}, {0x1, 0x8, 0xba, 0x87, 0x3f, 0xb2, "5fb283b2"}, 0x1, 0x2, {&(0x7f0000000140)=[{0x5a6a, 0xfffffc01, {&(0x7f00000000c0)}}, {0x5, 0x3, {&(0x7f0000000100)}, 0x81}]}, 0x3f}) 23:04:03 executing program 3: socket(0xf, 0x3, 0x0) 23:04:03 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:03 executing program 5: r0 = socket(0x2, 0x800, 0x0) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:initctl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x24040045) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) socket(0x2, 0x800, 0x0) (async) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:initctl_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x25}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x24040045) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) 23:04:03 executing program 4: socket(0x1d, 0x3, 0x1) (async) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0xf3a, 0x7fff, 0x2000000}) 23:04:03 executing program 3: socket(0xf, 0x3, 0x0) 23:04:03 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:03 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x4, 0x400080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r2}, 0x14) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r2, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0xffffffffffffff88}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r3) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004014}, 0x884) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) 23:04:03 executing program 4: socket(0x1d, 0x3, 0x1) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0xf3a, 0x7fff, 0x2000000}) socket(0x1d, 0x3, 0x1) (async) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0xf3a, 0x7fff, 0x2000000}) (async) 23:04:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x48004) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x3) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x48004) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x3) (async) 23:04:04 executing program 3: socket(0xf, 0x3, 0x0) 23:04:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x4, 0x400080) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) (rerun: 32) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r2}, 0x14) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r2, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0xffffffffffffff88}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async, rerun: 32) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r3) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004014}, 0x884) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) (rerun: 32) 23:04:04 executing program 5: r0 = socket(0x1d, 0x3, 0x1) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @default, 0x1, @null}, &(0x7f0000000040)=0x1c, 0x80000) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 23:04:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) r1 = socket(0x26, 0x3, 0x4) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c0000000107020100000000000000000500000a4c000780080002400000000808000140000000090800014000007fff080001400ec99996080001400000a187080019400001400000000008000140000000030800024000000fff3c00078008000140000000010800014000000003080001400000000408000140000000df08000240000000030800024000000006080002400000000367029bf7693952e52190b59ffdc364c506c885a52ca57ffffbcc427473380b79e45039c1dbbf98b340fa8a"], 0x9c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 23:04:04 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x7, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x80, 0x20, 0x9}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000048}, 0x8840) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001480)={&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, &(0x7f0000001400)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0x81}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x3f}, {&(0x7f0000001640)=""/217, 0xd9}, &(0x7f00000013c0)=[{&(0x7f0000000380)=""/56, 0x38}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, 0x40, 0x6}}], 0x60, 0x800}, 0x40080) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) openat$cgroup_pressure(r1, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f00000000c0)=0x1ff) 23:04:04 executing program 5: r0 = socket(0x1d, 0x3, 0x1) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @default, 0x1, @null}, &(0x7f0000000040)=0x1c, 0x80000) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 23:04:04 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x7, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x80, 0x20, 0x9}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000048}, 0x8840) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001480)={&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, &(0x7f0000001400)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0x81}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x3f}, {&(0x7f0000001640)=""/217, 0xd9}, &(0x7f00000013c0)=[{&(0x7f0000000380)=""/56, 0x38}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, 0x40, 0x6}}], 0x60, 0x800}, 0x40080) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async) openat$cgroup_pressure(r1, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f00000000c0)=0x1ff) 23:04:04 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) r1 = socket(0x26, 0x3, 0x4) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c0000000107020100000000000000000500000a4c000780080002400000000808000140000000090800014000007fff080001400ec99996080001400000a187080019400001400000000008000140000000030800024000000fff3c00078008000140000000010800014000000003080001400000000408000140000000df08000240000000030800024000000006080002400000000367029bf7693952e52190b59ffdc364c506c885a52ca57ffffbcc427473380b79e45039c1dbbf98b340fa8a"], 0x9c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 23:04:04 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x4, 0x400080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r2}, 0x14) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r2, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0xffffffffffffff88}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async, rerun: 32) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r3) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004014}, 0x884) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) 23:04:04 executing program 5: r0 = socket(0x1d, 0x3, 0x1) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @default, 0x1, @null}, &(0x7f0000000040)=0x1c, 0x80000) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 23:04:04 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x7, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x80, 0x20, 0x9}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000048}, 0x8840) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001480)={&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)=""/215, 0xd7}], 0x1, &(0x7f0000001400)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0x81}}, @rdma_args={0x48, 0x114, 0x1, {{0x4, 0x3f}, {&(0x7f0000001640)=""/217, 0xd9}, &(0x7f00000013c0)=[{&(0x7f0000000380)=""/56, 0x38}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, 0x40, 0x6}}], 0x60, 0x800}, 0x40080) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:04 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) r1 = socket(0x26, 0x3, 0x4) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c0000000107020100000000000000000500000a4c000780080002400000000808000140000000090800014000007fff080001400ec99996080001400000a187080019400001400000000008000140000000030800024000000fff3c00078008000140000000010800014000000003080001400000000408000140000000df08000240000000030800024000000006080002400000000367029bf7693952e52190b59ffdc364c506c885a52ca57ffffbcc427473380b79e45039c1dbbf98b340fa8a"], 0x9c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 23:04:04 executing program 1: ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) mmap$KVM_VCPU(&(0x7f0000ff8000/0x8000)=nil, 0x930, 0x1000000, 0x20010, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x2, 0x140) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x40010, r1, 0x8c8) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x2000005, 0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x6, 0x0, 0x2, 0x0, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x1) 23:04:04 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x7, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x80, 0x20, 0x9}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000048}, 0x8840) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:04 executing program 5: r0 = socket(0x1, 0x800, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c890}, 0x40001) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4c024068}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000052}, 0x4000005) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000000)="3061f9efefc356fc6faf0670a427e7ea9bc094", 0x13) 23:04:04 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) openat$cgroup_pressure(r1, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f00000000c0)=0x1ff) 23:04:04 executing program 1: ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x8) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) mmap$KVM_VCPU(&(0x7f0000ff8000/0x8000)=nil, 0x930, 0x1000000, 0x20010, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x2, 0x140) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x40010, r1, 0x8c8) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x2000005, 0x0, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x6, 0x0, 0x2, 0x0, 0x4}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x1) 23:04:05 executing program 4: socket(0xb, 0xb, 0x1) 23:04:05 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:05 executing program 5: r0 = socket(0x1, 0x800, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c890}, 0x40001) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4c024068}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000052}, 0x4000005) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000000)="3061f9efefc356fc6faf0670a427e7ea9bc094", 0x13) socket(0x1, 0x800, 0x5) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c890}, 0x40001) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4c024068}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000052}, 0x4000005) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) write$snapshot(0xffffffffffffffff, &(0x7f0000000000)="3061f9efefc356fc6faf0670a427e7ea9bc094", 0x13) (async) 23:04:05 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x7, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x80, 0x20, 0x9}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000048}, 0x8840) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:05 executing program 4: socket(0xb, 0xb, 0x1) socket(0xb, 0xb, 0x1) (async) 23:04:05 executing program 1: ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) mmap$KVM_VCPU(&(0x7f0000ff8000/0x8000)=nil, 0x930, 0x1000000, 0x20010, r0, 0x0) (async) r1 = syz_open_dev$audion(&(0x7f0000000140), 0x2, 0x140) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x40010, r1, 0x8c8) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x2000005, 0x0, 0x4}) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x3}) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x6, 0x0, 0x2, 0x0, 0x4}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x1) 23:04:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000340)={0x30, 0x0, 0x101, 0x0, 0x2, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000400ac1414aa"], 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88050100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4005) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x1}, 0x14}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f00000002c0)={0x2, @broadcast}) 23:04:05 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x7, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x80, 0x20, 0x9}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000048}, 0x8840) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:05 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)=@userptr={0x5, 0x2, 0x4, 0x10000, 0x4a, {r2, r3/1000+10000}, {0x3, 0x2, 0xc5, 0x6, 0x1, 0x1f, "8ee18b11"}, 0x1, 0x2, {&(0x7f00000001c0)}, 0x7, 0x0, r4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x1}) r5 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev, @bcast, 0x0, [@rose, @remote, @null, @null, @netrom, @default]}, &(0x7f0000000100)=0x40, 0x80000) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f0000000140)=0x7f) 23:04:05 executing program 5: r0 = socket(0x1, 0x800, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c890}, 0x40001) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4c024068}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000052}, 0x4000005) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000000)="3061f9efefc356fc6faf0670a427e7ea9bc094", 0x13) socket(0x1, 0x800, 0x5) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c890}, 0x40001) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4c024068}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000052}, 0x4000005) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) write$snapshot(0xffffffffffffffff, &(0x7f0000000000)="3061f9efefc356fc6faf0670a427e7ea9bc094", 0x13) (async) 23:04:05 executing program 4: socket(0xb, 0xb, 0x1) 23:04:05 executing program 5: r0 = socket(0x1d, 0x3, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:05 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)=@userptr={0x5, 0x2, 0x4, 0x10000, 0x4a, {r2, r3/1000+10000}, {0x3, 0x2, 0xc5, 0x6, 0x1, 0x1f, "8ee18b11"}, 0x1, 0x2, {&(0x7f00000001c0)}, 0x7, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x1}) (async) r5 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev, @bcast, 0x0, [@rose, @remote, @null, @null, @netrom, @default]}, &(0x7f0000000100)=0x40, 0x80000) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f0000000140)=0x7f) [ 1332.103776] can: request_module (can-proto-6) failed. 23:04:06 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x2001, 0x0, 0x0) 23:04:06 executing program 4: socket(0x1d, 0x2, 0x1) 23:04:06 executing program 5: r0 = socket(0x1d, 0x3, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000340)={0x30, 0x0, 0x101, 0x0, 0x2, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000400ac1414aa"], 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88050100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4005) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x1}, 0x14}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f00000002c0)={0x2, @broadcast}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000340)={0x30, 0x0, 0x101, 0x0, 0x2, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) (async) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000400ac1414aa"], 0x1c}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88050100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4005) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r6) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f00000002c0)={0x2, @broadcast}) (async) 23:04:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)=@userptr={0x5, 0x2, 0x4, 0x10000, 0x4a, {r2, r3/1000+10000}, {0x3, 0x2, 0xc5, 0x6, 0x1, 0x1f, "8ee18b11"}, 0x1, 0x2, {&(0x7f00000001c0)}, 0x7, 0x0, r4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x1}) r5 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev, @bcast, 0x0, [@rose, @remote, @null, @null, @netrom, @default]}, &(0x7f0000000100)=0x40, 0x80000) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f0000000140)=0x7f) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) clock_gettime(0x0, &(0x7f0000000180)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)=@userptr={0x5, 0x2, 0x4, 0x10000, 0x4a, {r2, r3/1000+10000}, {0x3, 0x2, 0xc5, 0x6, 0x1, 0x1f, "8ee18b11"}, 0x1, 0x2, {&(0x7f00000001c0)}, 0x7, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x1}) (async) accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev, @bcast, 0x0, [@rose, @remote, @null, @null, @netrom, @default]}, &(0x7f0000000100)=0x40, 0x80000) (async) ioctl$SIOCRSSCAUSE(r5, 0x89e1, &(0x7f0000000140)=0x7f) (async) 23:04:06 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x7, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x80, 0x20, 0x9}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000048}, 0x8840) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:06 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x1, 0x7, 0x20, @local, @dev={0xfe, 0x80, '\x00', 0x44}, 0x7800, 0x80, 0x20, 0x9}}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000340)={0x30, 0x0, 0x101, 0x0, 0x2, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000400ac1414aa"], 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88050100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4005) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x1}, 0x14}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f00000002c0)={0x2, @broadcast}) 23:04:06 executing program 4: socket(0x1d, 0x2, 0x1) 23:04:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x7fffffff, 0x105000) read$usbmon(r1, &(0x7f0000000100)=""/91, 0x5b) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:06 executing program 5: r0 = socket(0x1d, 0x3, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x1d, 0x3, 0x6) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) [ 1332.985988] can: request_module (can-proto-6) failed. 23:04:06 executing program 4: socket(0x1d, 0x2, 0x1) 23:04:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000340)={0x30, 0x0, 0x101, 0x0, 0x2, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000880}, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000400ac1414aa"], 0x1c}}, 0x0) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x88050100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r4, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvtap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4005) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00'}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x890d}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r6) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r9, 0x1}, 0x14}}, 0x0) (async, rerun: 32) ioctl$sock_bt_bnep_BNEPCONNDEL(r6, 0x400442c9, &(0x7f00000002c0)={0x2, @broadcast}) (rerun: 32) 23:04:06 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:06 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x7fffffff, 0x105000) read$usbmon(r1, &(0x7f0000000100)=""/91, 0x5b) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:06 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:06 executing program 4: bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) socket(0x1d, 0x3, 0x1) socket(0x27, 0xa, 0x622e) 23:04:07 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) [ 1333.174072] can: request_module (can-proto-6) failed. 23:04:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x7fffffff, 0x105000) read$usbmon(r1, &(0x7f0000000100)=""/91, 0x5b) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:07 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x50, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/236, 0xec, 0x1, 0x2e}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @fda={0x66646185, 0x5, 0x1, 0x2c}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}}, @enter_looper], 0x8, 0x0, &(0x7f0000000440)="14253a3a9f2420ca"}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_userptr={0x37, 0x3, 0x4, 0x4, 0x6, {0x77359400}, {0x5, 0xc, 0x3, 0xc9, 0x6f, 0x0, 'ch*b'}, 0x5, 0x2, {&(0x7f0000000100)=[{0x7, 0xb10, {&(0x7f0000000080)}, 0xfff}, {0x0, 0x8, {&(0x7f00000000c0)}, 0xffff}]}, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:07 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x15, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x200}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40000) [ 1333.197270] can: request_module (can-proto-6) failed. 23:04:07 executing program 4: bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) socket(0x1d, 0x3, 0x1) socket(0x27, 0xa, 0x622e) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) (async) socket(0x1d, 0x3, 0x1) (async) socket(0x27, 0xa, 0x622e) (async) 23:04:07 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:07 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x50, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/236, 0xec, 0x1, 0x2e}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @fda={0x66646185, 0x5, 0x1, 0x2c}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}}, @enter_looper], 0x8, 0x0, &(0x7f0000000440)="14253a3a9f2420ca"}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_userptr={0x37, 0x3, 0x4, 0x4, 0x6, {0x77359400}, {0x5, 0xc, 0x3, 0xc9, 0x6f, 0x0, 'ch*b'}, 0x5, 0x2, {&(0x7f0000000100)=[{0x7, 0xb10, {&(0x7f0000000080)}, 0xfff}, {0x0, 0x8, {&(0x7f00000000c0)}, 0xffff}]}, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x50, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/236, 0xec, 0x1, 0x2e}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @fda={0x66646185, 0x5, 0x1, 0x2c}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}}, @enter_looper], 0x8, 0x0, &(0x7f0000000440)="14253a3a9f2420ca"}) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_userptr={0x37, 0x3, 0x4, 0x4, 0x6, {0x77359400}, {0x5, 0xc, 0x3, 0xc9, 0x6f, 0x0, 'ch*b'}, 0x5, 0x2, {&(0x7f0000000100)=[{0x7, 0xb10, {&(0x7f0000000080)}, 0xfff}, {0x0, 0x8, {&(0x7f00000000c0)}, 0xffff}]}, 0x0, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:04:07 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x15, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x200}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40000) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x15, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x200}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) 23:04:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) 23:04:07 executing program 4: bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) socket(0x1d, 0x3, 0x1) socket(0x27, 0xa, 0x622e) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @empty}}, 0x1e) (async) socket(0x1d, 0x3, 0x1) (async) socket(0x27, 0xa, 0x622e) (async) 23:04:07 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:07 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) 23:04:07 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x50, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/236, 0xec, 0x1, 0x2e}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @fda={0x66646185, 0x5, 0x1, 0x2c}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}}, @enter_looper], 0x8, 0x0, &(0x7f0000000440)="14253a3a9f2420ca"}) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_userptr={0x37, 0x3, 0x4, 0x4, 0x6, {0x77359400}, {0x5, 0xc, 0x3, 0xc9, 0x6f, 0x0, 'ch*b'}, 0x5, 0x2, {&(0x7f0000000100)=[{0x7, 0xb10, {&(0x7f0000000080)}, 0xfff}, {0x0, 0x8, {&(0x7f00000000c0)}, 0xffff}]}, 0x0, 0x0, r2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:07 executing program 4: socket(0x1d, 0x2, 0x1) 23:04:07 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x15, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x200}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40000) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x15, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x200}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) 23:04:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2914, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xf3, 0x2, 0x4, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}], 0xed, 0x0, &(0x7f00000001c0)="6b6784d460f6cc44868c7105816856f508e6b0606816f99f8f213ba05e8b76811bbda0a32c55a375dca08c4d6d2245881273e4059272dae66fbf25cc8fc1350d29d06ba050d098a65af2c2b62bef08f67ab25e50601b944f1c1ad0b48615c68ab945a16898d9e6de07af359094cd04c2eed028c8b6daf44c66c2c545a7dc5604646cbcc299bbd8bde349258f1e4eec7af440fe8ce094d0e5862d3f53c35586e3b6798d885239f37369ea0a4fa53e7ad3ac76c8c08673f50f47fdf3170c4aac9e9aa47b1884b1b70a18aa992b2b6168836a81024e2dc6b6f967f6c32045cd8c866c291810d6741f5f7036eb68e2"}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 23:04:07 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:07 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2914, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xf3, 0x2, 0x4, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}], 0xed, 0x0, &(0x7f00000001c0)="6b6784d460f6cc44868c7105816856f508e6b0606816f99f8f213ba05e8b76811bbda0a32c55a375dca08c4d6d2245881273e4059272dae66fbf25cc8fc1350d29d06ba050d098a65af2c2b62bef08f67ab25e50601b944f1c1ad0b48615c68ab945a16898d9e6de07af359094cd04c2eed028c8b6daf44c66c2c545a7dc5604646cbcc299bbd8bde349258f1e4eec7af440fe8ce094d0e5862d3f53c35586e3b6798d885239f37369ea0a4fa53e7ad3ac76c8c08673f50f47fdf3170c4aac9e9aa47b1884b1b70a18aa992b2b6168836a81024e2dc6b6f967f6c32045cd8c866c291810d6741f5f7036eb68e2"}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x2914, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xf3, 0x2, 0x4, 0x0, 0x2}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}], 0xed, 0x0, &(0x7f00000001c0)="6b6784d460f6cc44868c7105816856f508e6b0606816f99f8f213ba05e8b76811bbda0a32c55a375dca08c4d6d2245881273e4059272dae66fbf25cc8fc1350d29d06ba050d098a65af2c2b62bef08f67ab25e50601b944f1c1ad0b48615c68ab945a16898d9e6de07af359094cd04c2eed028c8b6daf44c66c2c545a7dc5604646cbcc299bbd8bde349258f1e4eec7af440fe8ce094d0e5862d3f53c35586e3b6798d885239f37369ea0a4fa53e7ad3ac76c8c08673f50f47fdf3170c4aac9e9aa47b1884b1b70a18aa992b2b6168836a81024e2dc6b6f967f6c32045cd8c866c291810d6741f5f7036eb68e2"}) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) 23:04:07 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @local}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 23:04:07 executing program 4: socket(0x1d, 0x2, 0x1) 23:04:07 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async, rerun: 32) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000000c0)) (rerun: 32) 23:04:08 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:08 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2914, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xf3, 0x2, 0x4, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}], 0xed, 0x0, &(0x7f00000001c0)="6b6784d460f6cc44868c7105816856f508e6b0606816f99f8f213ba05e8b76811bbda0a32c55a375dca08c4d6d2245881273e4059272dae66fbf25cc8fc1350d29d06ba050d098a65af2c2b62bef08f67ab25e50601b944f1c1ad0b48615c68ab945a16898d9e6de07af359094cd04c2eed028c8b6daf44c66c2c545a7dc5604646cbcc299bbd8bde349258f1e4eec7af440fe8ce094d0e5862d3f53c35586e3b6798d885239f37369ea0a4fa53e7ad3ac76c8c08673f50f47fdf3170c4aac9e9aa47b1884b1b70a18aa992b2b6168836a81024e2dc6b6f967f6c32045cd8c866c291810d6741f5f7036eb68e2"}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x2914, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xf3, 0x2, 0x4, 0x0, 0x2}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}], 0xed, 0x0, &(0x7f00000001c0)="6b6784d460f6cc44868c7105816856f508e6b0606816f99f8f213ba05e8b76811bbda0a32c55a375dca08c4d6d2245881273e4059272dae66fbf25cc8fc1350d29d06ba050d098a65af2c2b62bef08f67ab25e50601b944f1c1ad0b48615c68ab945a16898d9e6de07af359094cd04c2eed028c8b6daf44c66c2c545a7dc5604646cbcc299bbd8bde349258f1e4eec7af440fe8ce094d0e5862d3f53c35586e3b6798d885239f37369ea0a4fa53e7ad3ac76c8c08673f50f47fdf3170c4aac9e9aa47b1884b1b70a18aa992b2b6168836a81024e2dc6b6f967f6c32045cd8c866c291810d6741f5f7036eb68e2"}) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) 23:04:08 executing program 4: socket(0x1d, 0x2, 0x1) 23:04:08 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @local}}, 0x1e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async, rerun: 32) r1 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 23:04:08 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x7fffffffffffffff, 0x42000) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000100), &(0x7f0000000140)=""/66, 0x42}) 23:04:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x40, 0x0, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @raw_data="5ae3a0e84bc6fecd206766bd61c6c133537658144b5023ecfd8db2041a7b9b3d814016d91f2f0876a4eb9067a728ee9b9c92671421bcb2a70c7ff6a99f8e10985beaa9cce554a50d270b14def0a8d550b67a81905eddb4af9331da294519d6bf14770c748cd3893dd8f83f036861fa26ba5d13ee55a30d34d8c565b64640421c72b26eeb8e20618f4b0f9994cb4d737ea92f3eecf4cfa072c1dbc21b2dcb4c01df81ba8c20b275822926796971e4fe3c627f5ab4f6771519fe4b1ca6c5f6f7906b262a20a4422f3a"}) 23:04:08 executing program 4: socket(0x1d, 0x80000, 0x20200) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x8, 0x13, 0xffc2, @random="82d5069a1f8d", 'macvlan0\x00'}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="70f6e161", @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf250b000000080031000400000005002a000000000005002d00010000000500290001000000"], 0x34}, 0x1, 0x0, 0x0, 0x20020000}, 0x4044000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={r1, 0x80000000, 0x3, 0x200, 0x4, 0x10001, 0x200, 0x6, 0x7f, 0x8, 0x7, 0x3}) socket(0x2a, 0xa, 0x2376) 23:04:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x40, 0x0, 0x1}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @raw_data="5ae3a0e84bc6fecd206766bd61c6c133537658144b5023ecfd8db2041a7b9b3d814016d91f2f0876a4eb9067a728ee9b9c92671421bcb2a70c7ff6a99f8e10985beaa9cce554a50d270b14def0a8d550b67a81905eddb4af9331da294519d6bf14770c748cd3893dd8f83f036861fa26ba5d13ee55a30d34d8c565b64640421c72b26eeb8e20618f4b0f9994cb4d737ea92f3eecf4cfa072c1dbc21b2dcb4c01df81ba8c20b275822926796971e4fe3c627f5ab4f6771519fe4b1ca6c5f6f7906b262a20a4422f3a"}) 23:04:08 executing program 3: socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:08 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x3}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x7fffffffffffffff, 0x42000) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000100), &(0x7f0000000140)=""/66, 0x42}) 23:04:08 executing program 4: socket(0x1d, 0x80000, 0x20200) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x8, 0x13, 0xffc2, @random="82d5069a1f8d", 'macvlan0\x00'}) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="70f6e161", @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf250b000000080031000400000005002a000000000005002d00010000000500290001000000"], 0x34}, 0x1, 0x0, 0x0, 0x20020000}, 0x4044000) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={r1, 0x80000000, 0x3, 0x200, 0x4, 0x10001, 0x200, 0x6, 0x7f, 0x8, 0x7, 0x3}) (async) socket(0x2a, 0xa, 0x2376) 23:04:09 executing program 0: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:09 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x40, 0x0, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x3, @raw_data="5ae3a0e84bc6fecd206766bd61c6c133537658144b5023ecfd8db2041a7b9b3d814016d91f2f0876a4eb9067a728ee9b9c92671421bcb2a70c7ff6a99f8e10985beaa9cce554a50d270b14def0a8d550b67a81905eddb4af9331da294519d6bf14770c748cd3893dd8f83f036861fa26ba5d13ee55a30d34d8c565b64640421c72b26eeb8e20618f4b0f9994cb4d737ea92f3eecf4cfa072c1dbc21b2dcb4c01df81ba8c20b275822926796971e4fe3c627f5ab4f6771519fe4b1ca6c5f6f7906b262a20a4422f3a"}) 23:04:09 executing program 4: socket(0x1d, 0x80000, 0x20200) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x8, 0x13, 0xffc2, @random="82d5069a1f8d", 'macvlan0\x00'}) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="70f6e161", @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf250b000000080031000400000005002a000000000005002d00010000000500290001000000"], 0x34}, 0x1, 0x0, 0x0, 0x20020000}, 0x4044000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={r1, 0x80000000, 0x3, 0x200, 0x4, 0x10001, 0x200, 0x6, 0x7f, 0x8, 0x7, 0x3}) (async) socket(0x2a, 0xa, 0x2376) 23:04:09 executing program 3: socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:09 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x3}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r2 = syz_open_dev$audion(&(0x7f00000000c0), 0x7fffffffffffffff, 0x42000) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000100), &(0x7f0000000140)=""/66, 0x42}) 23:04:09 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async, rerun: 64) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @local}}, 0x1e) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async, rerun: 64) r1 = socket$rds(0x15, 0x5, 0x0) (rerun: 64) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) 23:04:09 executing program 4: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x400}, 0x8) r0 = socket(0x2c, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x2) 23:04:09 executing program 3: socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:09 executing program 0: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:09 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@userptr={0xff, 0x9bc85077ac12e911, 0x4, 0x100, 0x7fff, {}, {0x3, 0xc, 0x7, 0x69, 0x0, 0x81, "0bfd52e4"}, 0x80000001, 0x2, {&(0x7f00000000c0)}, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:09 executing program 4: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x400}, 0x8) (async) r0 = socket(0x2c, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x2) 23:04:09 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 23:04:09 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1}) 23:04:09 executing program 0: recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:09 executing program 4: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x400}, 0x8) r0 = socket(0x2c, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x2) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x400}, 0x8) (async) socket(0x2c, 0x3, 0x1) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x2) (async) 23:04:09 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@userptr={0xff, 0x9bc85077ac12e911, 0x4, 0x100, 0x7fff, {}, {0x3, 0xc, 0x7, 0x69, 0x0, 0x81, "0bfd52e4"}, 0x80000001, 0x2, {&(0x7f00000000c0)}, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:09 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 23:04:10 executing program 5: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x5, 0xdf3, 0x2, 0x0, "b68a1e0bec1ff68985e67fab47f0f6b177cce850f3d6d6e2736a518c656a6429793fda7c458c4cf98972cd852425e8b02a3e83bc00de786a2d93e26cec3e618b62074b43110b5dea267fac4676d50e1a9a351be08eec85f9672245646f4684e94b846616dd5c7d8448cbffc704c73bede0a173a1d8d57fe84512986d991b41cf"}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1}) (async) 23:04:10 executing program 0: r0 = socket(0x0, 0x3, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 23:04:10 executing program 4: socket(0x18, 0x80000, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x11, 0x4, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffeffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 23:04:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@userptr={0xff, 0x9bc85077ac12e911, 0x4, 0x100, 0x7fff, {}, {0x3, 0xc, 0x7, 0x69, 0x0, 0x81, "0bfd52e4"}, 0x80000001, 0x2, {&(0x7f00000000c0)}, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@userptr={0xff, 0x9bc85077ac12e911, 0x4, 0x100, 0x7fff, {}, {0x3, 0xc, 0x7, 0x69, 0x0, 0x81, "0bfd52e4"}, 0x80000001, 0x2, {&(0x7f00000000c0)}, 0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:04:10 executing program 4: socket(0x18, 0x80000, 0x1) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x11, 0x4, 0x6) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffeffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 23:04:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) 23:04:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1}) (async) 23:04:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[], 0x4) 23:04:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) (async) 23:04:10 executing program 5: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x5, 0xdf3, 0x2, 0x0, "b68a1e0bec1ff68985e67fab47f0f6b177cce850f3d6d6e2736a518c656a6429793fda7c458c4cf98972cd852425e8b02a3e83bc00de786a2d93e26cec3e618b62074b43110b5dea267fac4676d50e1a9a351be08eec85f9672245646f4684e94b846616dd5c7d8448cbffc704c73bede0a173a1d8d57fe84512986d991b41cf"}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x1d, 0x3, 0x1) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x5, 0xdf3, 0x2, 0x0, "b68a1e0bec1ff68985e67fab47f0f6b177cce850f3d6d6e2736a518c656a6429793fda7c458c4cf98972cd852425e8b02a3e83bc00de786a2d93e26cec3e618b62074b43110b5dea267fac4676d50e1a9a351be08eec85f9672245646f4684e94b846616dd5c7d8448cbffc704c73bede0a173a1d8d57fe84512986d991b41cf"}) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:04:10 executing program 0: r0 = socket(0x0, 0x3, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:10 executing program 4: socket(0x18, 0x80000, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x11, 0x4, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffeffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) socket(0x18, 0x80000, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) socket(0x11, 0x4, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffeffff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) 23:04:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[], 0x4) 23:04:10 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) 23:04:10 executing program 5: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x5, 0xdf3, 0x2, 0x0, "b68a1e0bec1ff68985e67fab47f0f6b177cce850f3d6d6e2736a518c656a6429793fda7c458c4cf98972cd852425e8b02a3e83bc00de786a2d93e26cec3e618b62074b43110b5dea267fac4676d50e1a9a351be08eec85f9672245646f4684e94b846616dd5c7d8448cbffc704c73bede0a173a1d8d57fe84512986d991b41cf"}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x1d, 0x3, 0x1) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x5, 0xdf3, 0x2, 0x0, "b68a1e0bec1ff68985e67fab47f0f6b177cce850f3d6d6e2736a518c656a6429793fda7c458c4cf98972cd852425e8b02a3e83bc00de786a2d93e26cec3e618b62074b43110b5dea267fac4676d50e1a9a351be08eec85f9672245646f4684e94b846616dd5c7d8448cbffc704c73bede0a173a1d8d57fe84512986d991b41cf"}) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:04:10 executing program 0: r0 = socket(0x0, 0x3, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000300)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffffa, 0x4, {0x0, @raw_data="92fd5400977c1a0db6e08669deca33bbbc5cc681eb58bf2f5cd611198feb70812a3b1558ae5b1131d249d77a2fd03e0ce8f71845b2ba28b65fa4ddfe27244557faa4597fe80eba08a5f352d306475051fb70fde5a4054e82ec804063375f66c8df8b6e6abff118410009d3b3cb89b4afdf5746f53289126bc6a7e094d4cfe47c1e4adcfeb7bf1b5d888aa16c174c06c67dafdc735e263294f9b365d8b7f7eb8d3dfe3d05fa563fe110e59604678d484b60beeb05966408dee5e19fe2737167124d565cbbfc93cfd6"}, 0x40}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x6, 0x0, 0x2, 0xfffffffd, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7, 0x7e2, 0x3}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4004040}, 0x20004800) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) socket(0x26, 0x800, 0x7) 23:04:10 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xd941, "06351711ac864c9c48ad8fd95893f8576130ae66318f68304a74d8158add58b819b449b47f07f1573338954c7096923b22727e34e273daa0d9daa0fa7e5a24a9ef843b1fd1a45c499362c5484b6baa42fa26737dbe81deb43d17b0960af4b813d3cc1c638dfea2ae4fa1ab7ae9f0f2eed1d08d47588191805475919992c49696f119ae30995314ba0b281e8ace0769fe92067712af84e185bda6142c0be5af898129e83f462ab521e9dda80458f97ffd357ceeecc3da2ea8faacc8fb7e259ed8213630ceaa1d278afd000154"}) r1 = socket(0x1d, 0x3, 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x143}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) 23:04:10 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x1, 0x0, 0x3}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 23:04:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[], 0x4) 23:04:10 executing program 5: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x1804) r0 = socket(0x1d, 0x3, 0x1) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x7, @multicast}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000300)) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffffa, 0x4, {0x0, @raw_data="92fd5400977c1a0db6e08669deca33bbbc5cc681eb58bf2f5cd611198feb70812a3b1558ae5b1131d249d77a2fd03e0ce8f71845b2ba28b65fa4ddfe27244557faa4597fe80eba08a5f352d306475051fb70fde5a4054e82ec804063375f66c8df8b6e6abff118410009d3b3cb89b4afdf5746f53289126bc6a7e094d4cfe47c1e4adcfeb7bf1b5d888aa16c174c06c67dafdc735e263294f9b365d8b7f7eb8d3dfe3d05fa563fe110e59604678d484b60beeb05966408dee5e19fe2737167124d565cbbfc93cfd6"}, 0x40}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x6, 0x0, 0x2, 0xfffffffd, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7, 0x7e2, 0x3}}) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4004040}, 0x20004800) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) socket(0x26, 0x800, 0x7) 23:04:10 executing program 0: r0 = socket(0xf, 0x0, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:10 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x1, 0x0, 0x3}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 23:04:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB], 0x4) 23:04:10 executing program 5: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x1804) (async) r0 = socket(0x1d, 0x3, 0x1) socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x7, @multicast}) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:10 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xd941, "06351711ac864c9c48ad8fd95893f8576130ae66318f68304a74d8158add58b819b449b47f07f1573338954c7096923b22727e34e273daa0d9daa0fa7e5a24a9ef843b1fd1a45c499362c5484b6baa42fa26737dbe81deb43d17b0960af4b813d3cc1c638dfea2ae4fa1ab7ae9f0f2eed1d08d47588191805475919992c49696f119ae30995314ba0b281e8ace0769fe92067712af84e185bda6142c0be5af898129e83f462ab521e9dda80458f97ffd357ceeecc3da2ea8faacc8fb7e259ed8213630ceaa1d278afd000154"}) (async) r1 = socket(0x1d, 0x3, 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x143}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) 23:04:10 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000300)) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x8, 0xfffffffa, 0x4, {0x0, @raw_data="92fd5400977c1a0db6e08669deca33bbbc5cc681eb58bf2f5cd611198feb70812a3b1558ae5b1131d249d77a2fd03e0ce8f71845b2ba28b65fa4ddfe27244557faa4597fe80eba08a5f352d306475051fb70fde5a4054e82ec804063375f66c8df8b6e6abff118410009d3b3cb89b4afdf5746f53289126bc6a7e094d4cfe47c1e4adcfeb7bf1b5d888aa16c174c06c67dafdc735e263294f9b365d8b7f7eb8d3dfe3d05fa563fe110e59604678d484b60beeb05966408dee5e19fe2737167124d565cbbfc93cfd6"}, 0x40}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x6, 0x0, 0x2, 0xfffffffd, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7, 0x7e2, 0x3}}) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4004040}, 0x20004800) (rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) socket(0x26, 0x800, 0x7) 23:04:10 executing program 0: r0 = socket(0xf, 0x0, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB], 0x4) 23:04:10 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0xd941, "06351711ac864c9c48ad8fd95893f8576130ae66318f68304a74d8158add58b819b449b47f07f1573338954c7096923b22727e34e273daa0d9daa0fa7e5a24a9ef843b1fd1a45c499362c5484b6baa42fa26737dbe81deb43d17b0960af4b813d3cc1c638dfea2ae4fa1ab7ae9f0f2eed1d08d47588191805475919992c49696f119ae30995314ba0b281e8ace0769fe92067712af84e185bda6142c0be5af898129e83f462ab521e9dda80458f97ffd357ceeecc3da2ea8faacc8fb7e259ed8213630ceaa1d278afd000154"}) (async) r1 = socket(0x1d, 0x3, 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x143}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4000004) 23:04:11 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x1, 0x0, 0x3}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x1, 0x0, 0x3}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) 23:04:11 executing program 5: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x1804) r0 = socket(0x1d, 0x3, 0x1) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x7, @multicast}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x1804) (async) socket(0x1d, 0x3, 0x1) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0x7, @multicast}) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:04:11 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB], 0x4) 23:04:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5, 0x2, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) 23:04:11 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x100000001, 0x100) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x2fb, 0x20840) connect$nfc_raw(r2, &(0x7f00000001c0)={0x27, 0x1, 0x1, 0x5}, 0x10) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0x1ff, 0x2, 0x4, 0x800, 0x7f, {}, {0x1, 0xc, 0x80, 0x1, 0x2, 0x66, "0213bd68"}, 0x7f, 0x4, {&(0x7f0000000080)=[{0x7fff, 0x2, {}, 0x1}, {0x80, 0x2, {r2}, 0x4}]}, 0x8001, 0x0, r3}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000200)={@any, 0x1af, 0x8, 0x7fff, 0x2, 0x0, "36166f8c1138e02ca212b275c9e09842b2a26e58972674bc6a4537ba0c3e230593949865099c2d5691969a74674d522afe4de2caabf07192c20cdd486f33b358822a89c1f34742dbf19434b5ce0815c82993a70bab5d69195ad944183fbed63834435d022a17ffb4123f9e38649f434136330d327814e6a2aa499bcd59aa4889"}) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) 23:04:11 executing program 0: r0 = socket(0xf, 0x0, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:11 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 23:04:11 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff2236"], 0x4) 23:04:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x0, 0x4}) 23:04:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5, 0x2, 0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async, rerun: 64) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) (rerun: 64) 23:04:11 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) (async, rerun: 64) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x100000001, 0x100) (async, rerun: 32) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x2fb, 0x20840) (rerun: 32) connect$nfc_raw(r2, &(0x7f00000001c0)={0x27, 0x1, 0x1, 0x5}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0x1ff, 0x2, 0x4, 0x800, 0x7f, {}, {0x1, 0xc, 0x80, 0x1, 0x2, 0x66, "0213bd68"}, 0x7f, 0x4, {&(0x7f0000000080)=[{0x7fff, 0x2, {}, 0x1}, {0x80, 0x2, {r2}, 0x4}]}, 0x8001, 0x0, r3}) (async) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000200)={@any, 0x1af, 0x8, 0x7fff, 0x2, 0x0, "36166f8c1138e02ca212b275c9e09842b2a26e58972674bc6a4537ba0c3e230593949865099c2d5691969a74674d522afe4de2caabf07192c20cdd486f33b358822a89c1f34742dbf19434b5ce0815c82993a70bab5d69195ad944183fbed63834435d022a17ffb4123f9e38649f434136330d327814e6a2aa499bcd59aa4889"}) (async, rerun: 32) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) (rerun: 32) 23:04:11 executing program 0: r0 = socket(0xf, 0x3, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:11 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB='H'], 0x4) 23:04:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x0, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x0, 0x4}) (async) 23:04:11 executing program 4: socket(0x1d, 0x3, 0x1) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 23:04:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5, 0x2, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x5, 0x2, 0x2}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7) (async) 23:04:11 executing program 0: r0 = socket(0xf, 0x3, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:11 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x100000001, 0x100) r3 = syz_open_dev$audion(&(0x7f0000000100), 0x2fb, 0x20840) connect$nfc_raw(r2, &(0x7f00000001c0)={0x27, 0x1, 0x1, 0x5}, 0x10) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0x1ff, 0x2, 0x4, 0x800, 0x7f, {}, {0x1, 0xc, 0x80, 0x1, 0x2, 0x66, "0213bd68"}, 0x7f, 0x4, {&(0x7f0000000080)=[{0x7fff, 0x2, {}, 0x1}, {0x80, 0x2, {r2}, 0x4}]}, 0x8001, 0x0, r3}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000200)={@any, 0x1af, 0x8, 0x7fff, 0x2, 0x0, "36166f8c1138e02ca212b275c9e09842b2a26e58972674bc6a4537ba0c3e230593949865099c2d5691969a74674d522afe4de2caabf07192c20cdd486f33b358822a89c1f34742dbf19434b5ce0815c82993a70bab5d69195ad944183fbed63834435d022a17ffb4123f9e38649f434136330d327814e6a2aa499bcd59aa4889"}) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) (async) syz_open_dev$audion(&(0x7f0000000040), 0x100000001, 0x100) (async) syz_open_dev$audion(&(0x7f0000000100), 0x2fb, 0x20840) (async) connect$nfc_raw(r2, &(0x7f00000001c0)={0x27, 0x1, 0x1, 0x5}, 0x10) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)=@multiplanar_fd={0x1ff, 0x2, 0x4, 0x800, 0x7f, {}, {0x1, 0xc, 0x80, 0x1, 0x2, 0x66, "0213bd68"}, 0x7f, 0x4, {&(0x7f0000000080)=[{0x7fff, 0x2, {}, 0x1}, {0x80, 0x2, {r2}, 0x4}]}, 0x8001, 0x0, r3}) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000200)={@any, 0x1af, 0x8, 0x7fff, 0x2, 0x0, "36166f8c1138e02ca212b275c9e09842b2a26e58972674bc6a4537ba0c3e230593949865099c2d5691969a74674d522afe4de2caabf07192c20cdd486f33b358822a89c1f34742dbf19434b5ce0815c82993a70bab5d69195ad944183fbed63834435d022a17ffb4123f9e38649f434136330d327814e6a2aa499bcd59aa4889"}) (async) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0xffffffffffffffff) (async) 23:04:11 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB], 0x4) 23:04:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x0, 0x4}) 23:04:11 executing program 0: r0 = socket(0xf, 0x3, 0x0) recvfrom$rose(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:11 executing program 1: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x2c}}, 0x40080) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000003c0)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) write$snapshot(r2, &(0x7f0000000180)="f1317e6f6db321062cd1844ba9a579c92585a927f110655ad8aec8ecbe3218c3414de3e5aa2eb86c2dfab95cde835253c0a49484764e619fdd434e56403d407e92384fb2005e0ddf6c0e2c82872435a8ad0a10461f4c5b18c06ae88a73a04c85bc79d23ca31a2503a0a0e5", 0x6b) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = accept4$rose(r3, &(0x7f0000000100)=@full={0xb, @remote, @remote, 0x0, [@null, @rose, @null, @remote, @null]}, &(0x7f0000000140)=0x40, 0x800) connect$rose(r5, &(0x7f0000000440)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000340)=@overlay={0x6, 0x1, 0x4, 0x4000, 0x7, {}, {0x0, 0xc, 0x8, 0x7f, 0x2, 0x5, "98273318"}, 0xffffff80, 0x3, {}, 0x2, 0x0, r4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:11 executing program 5: r0 = socket(0x2a, 0x3, 0x1ff) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = socket(0x2, 0x80000, 0x5) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1001}, 0x4000) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) socket$pptp(0x18, 0x1, 0x2) 23:04:11 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) socket(0x1d, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) (async) 23:04:11 executing program 0: socket(0xf, 0x3, 0x2) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:11 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:11 executing program 1: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x2c}}, 0x40080) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000003c0)) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) write$snapshot(r2, &(0x7f0000000180)="f1317e6f6db321062cd1844ba9a579c92585a927f110655ad8aec8ecbe3218c3414de3e5aa2eb86c2dfab95cde835253c0a49484764e619fdd434e56403d407e92384fb2005e0ddf6c0e2c82872435a8ad0a10461f4c5b18c06ae88a73a04c85bc79d23ca31a2503a0a0e5", 0x6b) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = accept4$rose(r3, &(0x7f0000000100)=@full={0xb, @remote, @remote, 0x0, [@null, @rose, @null, @remote, @null]}, &(0x7f0000000140)=0x40, 0x800) connect$rose(r5, &(0x7f0000000440)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000340)=@overlay={0x6, 0x1, 0x4, 0x4000, 0x7, {}, {0x0, 0xc, 0x8, 0x7f, 0x2, 0x5, "98273318"}, 0xffffff80, 0x3, {}, 0x2, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:11 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB], 0x4) 23:04:11 executing program 0: socket(0xf, 0x3, 0x2) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:11 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:04:11 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB], 0x4) 23:04:11 executing program 1: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}]}, 0x2c}}, 0x40080) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000003c0)) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) write$snapshot(r2, &(0x7f0000000180)="f1317e6f6db321062cd1844ba9a579c92585a927f110655ad8aec8ecbe3218c3414de3e5aa2eb86c2dfab95cde835253c0a49484764e619fdd434e56403d407e92384fb2005e0ddf6c0e2c82872435a8ad0a10461f4c5b18c06ae88a73a04c85bc79d23ca31a2503a0a0e5", 0x6b) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async, rerun: 32) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r5 = accept4$rose(r3, &(0x7f0000000100)=@full={0xb, @remote, @remote, 0x0, [@null, @rose, @null, @remote, @null]}, &(0x7f0000000140)=0x40, 0x800) connect$rose(r5, &(0x7f0000000440)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) ioctl$vim2m_VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000340)=@overlay={0x6, 0x1, 0x4, 0x4000, 0x7, {}, {0x0, 0xc, 0x8, 0x7f, 0x2, 0x5, "98273318"}, 0xffffff80, 0x3, {}, 0x2, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:11 executing program 5: r0 = socket(0x2a, 0x3, 0x1ff) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = socket(0x2, 0x80000, 0x5) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1001}, 0x4000) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) socket$pptp(0x18, 0x1, 0x2) socket(0x2a, 0x3, 0x1ff) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) socket(0x2, 0x80000, 0x5) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1001}, 0x4000) (async) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) (async) socket$pptp(0x18, 0x1, 0x2) (async) 23:04:11 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:04:11 executing program 0: socket(0xf, 0x3, 0x2) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 23:04:11 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB], 0x4) 23:04:11 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (rerun: 64) 23:04:11 executing program 0: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 23:04:11 executing program 3: r0 = socket(0x2a, 0x3, 0x1ff) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = socket(0x2, 0x80000, 0x5) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1001}, 0x4000) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) socket$pptp(0x18, 0x1, 0x2) 23:04:11 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket(0x1d, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) 23:04:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x32}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$ptp(r1, &(0x7f0000000140)=""/111, 0x6f) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x73bf, 0x1, 0x1, 0x0, 0x9}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 23:04:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:11 executing program 5: r0 = socket(0x2a, 0x3, 0x1ff) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = socket(0x2, 0x80000, 0x5) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1001}, 0x4000) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) socket$pptp(0x18, 0x1, 0x2) socket(0x2a, 0x3, 0x1ff) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) socket(0x2, 0x80000, 0x5) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1001}, 0x4000) (async) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) (async) socket$pptp(0x18, 0x1, 0x2) (async) 23:04:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:11 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x32}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$ptp(r1, &(0x7f0000000140)=""/111, 0x6f) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x73bf, 0x1, 0x1, 0x0, 0x9}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x32}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) read$ptp(r1, &(0x7f0000000140)=""/111, 0x6f) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x73bf, 0x1, 0x1, 0x0, 0x9}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) 23:04:11 executing program 4: socket(0x1d, 0x3, 0x1) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 23:04:11 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[], 0x4) 23:04:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8000, 0x1, 0x3, 0x0, 0x4d}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x5, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8000, 0x1, 0x3, 0x0, 0x4d}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x5, 0x1, 0x1, 0x0, 0x3}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x32}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$ptp(r1, &(0x7f0000000140)=""/111, 0x6f) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x73bf, 0x1, 0x1, 0x0, 0x9}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x32}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) read$ptp(r1, &(0x7f0000000140)=""/111, 0x6f) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x73bf, 0x1, 0x1, 0x0, 0x9}) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) 23:04:12 executing program 4: r0 = socket(0x2a, 0x6, 0x104) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000040)={0x20, 0x331e, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 'bridge_slave_0\x00'}) bind$rose(r2, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @null]}, 0x40) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) 23:04:12 executing program 5: socket(0x10, 0xa, 0x1) 23:04:12 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[], 0x4) 23:04:12 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 23:04:12 executing program 5: socket(0x10, 0xa, 0x1) 23:04:12 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000001600)=ANY=[], 0x4) 23:04:12 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 23:04:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) recvfrom$rose(r3, &(0x7f0000000280)=""/173, 0xad, 0x20000010, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x20, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x1, 0x4, 0x1000, 0xc91, {0x0, 0xea60}, {0x2, 0x8, 0x40, 0x0, 0x5, 0x1, "3975ad10"}, 0xfffffffa, 0x1, {&(0x7f0000000140)=[{0x6, 0x3ff, {0x8000}, 0xc56}, {0x7f, 0x0, {0x5}, 0x9}]}}) 23:04:12 executing program 5: socket(0x10, 0xa, 0x1) socket(0x10, 0xa, 0x1) (async) 23:04:12 executing program 3: setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001600)=ANY=[], 0x4) 23:04:12 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8000, 0x1, 0x3, 0x0, 0x4d}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x5, 0x1, 0x1, 0x0, 0x3}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:12 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 23:04:12 executing program 4: r0 = socket(0x2a, 0x6, 0x104) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000040)={0x20, 0x331e, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 'bridge_slave_0\x00'}) (async) bind$rose(r2, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @null]}, 0x40) (async) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) 23:04:12 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:12 executing program 3: setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001600)=ANY=[], 0x4) 23:04:12 executing program 0: setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) 23:04:12 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:12 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) recvfrom$rose(r3, &(0x7f0000000280)=""/173, 0xad, 0x20000010, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x20, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x1, 0x4, 0x1000, 0xc91, {0x0, 0xea60}, {0x2, 0x8, 0x40, 0x0, 0x5, 0x1, "3975ad10"}, 0xfffffffa, 0x1, {&(0x7f0000000140)=[{0x6, 0x3ff, {0x8000}, 0xc56}, {0x7f, 0x0, {0x5}, 0x9}]}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) (async) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) (async) recvfrom$rose(r3, &(0x7f0000000280)=""/173, 0xad, 0x20000010, 0x0, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x20, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x1, 0x4, 0x1000, 0xc91, {0x0, 0xea60}, {0x2, 0x8, 0x40, 0x0, 0x5, 0x1, "3975ad10"}, 0xfffffffa, 0x1, {&(0x7f0000000140)=[{0x6, 0x3ff, {0x8000}, 0xc56}, {0x7f, 0x0, {0x5}, 0x9}]}}) (async) 23:04:12 executing program 3: setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001600)=ANY=[], 0x4) 23:04:12 executing program 4: r0 = socket(0x2a, 0x6, 0x104) (async, rerun: 32) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000040)={0x20, 0x331e, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 'bridge_slave_0\x00'}) bind$rose(r2, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @null]}, 0x40) (async, rerun: 64) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) (rerun: 64) 23:04:12 executing program 0: setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) 23:04:12 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:04:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) recvfrom$rose(r3, &(0x7f0000000280)=""/173, 0xad, 0x20000010, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x20, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x1, 0x4, 0x1000, 0xc91, {0x0, 0xea60}, {0x2, 0x8, 0x40, 0x0, 0x5, 0x1, "3975ad10"}, 0xfffffffa, 0x1, {&(0x7f0000000140)=[{0x6, 0x3ff, {0x8000}, 0xc56}, {0x7f, 0x0, {0x5}, 0x9}]}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) (async) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) (async) recvfrom$rose(r3, &(0x7f0000000280)=""/173, 0xad, 0x20000010, 0x0, 0x0) (async) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x20, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x1, 0x4, 0x1000, 0xc91, {0x0, 0xea60}, {0x2, 0x8, 0x40, 0x0, 0x5, 0x1, "3975ad10"}, 0xfffffffa, 0x1, {&(0x7f0000000140)=[{0x6, 0x3ff, {0x8000}, 0xc56}, {0x7f, 0x0, {0x5}, 0x9}]}}) (async) 23:04:13 executing program 3: socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001600)=ANY=[], 0x4) 23:04:13 executing program 0: setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) 23:04:13 executing program 5: r0 = socket(0x25, 0x2, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x3f, 0x9, 0x0, 0xc, @dev={0xfe, 0x80, '\x00', 0x40}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x1, 0x7ff, 0x1ff}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250f000000050037000100000008003b000001000008000600", @ANYRES32=0x0, @ANYBLOB="08003c00a900000008003c000000008005002e000000000008000300", @ANYRES32=r1, @ANYBLOB="05002a00000000000a0009008fe34a915432000008000b0009000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004091}, 0x40) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x9}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x200}}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x24, 0x0, 0x41, 0x3}, @typedef={0x10}, @enum={0xd, 0x8, 0x0, 0x6, 0x4, [{0xc, 0x2313698c}, {0xf, 0x3e6}, {0x6, 0xffff}, {0x5, 0x74}, {0x8}, {0x9}, {0x0, 0xffffffd8}, {0xf, 0x6}]}, @union={0xe, 0x1, 0x0, 0x5, 0x1, 0x274d, [{0x0, 0x3, 0x200}]}, @restrict={0x9, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000600)=""/90, 0xda, 0x5a, 0x1}, 0x20) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040002}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x34424752, 0x1}}) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000003c0)={0x7, @random="9bbe7e889abc"}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000006c0)={0x6, 0x1ff, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge0\x00'}) 23:04:13 executing program 0: socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) 23:04:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x2, 0x3, 0x2}) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$userns(r1, &(0x7f0000000080)) 23:04:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x3f, 0x9, 0x0, 0xc, @dev={0xfe, 0x80, '\x00', 0x40}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x1, 0x7ff, 0x1ff}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250f000000050037000100000008003b000001000008000600", @ANYRES32=0x0, @ANYBLOB="08003c00a900000008003c000000008005002e000000000008000300", @ANYRES32=r1, @ANYBLOB="05002a00000000000a0009008fe34a915432000008000b0009000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004091}, 0x40) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x9}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x200}}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x24, 0x0, 0x41, 0x3}, @typedef={0x10}, @enum={0xd, 0x8, 0x0, 0x6, 0x4, [{0xc, 0x2313698c}, {0xf, 0x3e6}, {0x6, 0xffff}, {0x5, 0x74}, {0x8}, {0x9}, {0x0, 0xffffffd8}, {0xf, 0x6}]}, @union={0xe, 0x1, 0x0, 0x5, 0x1, 0x274d, [{0x0, 0x3, 0x200}]}, @restrict={0x9, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000600)=""/90, 0xda, 0x5a, 0x1}, 0x20) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040002}, 0x10) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x34424752, 0x1}}) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000003c0)={0x7, @random="9bbe7e889abc"}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000006c0)={0x6, 0x1ff, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge0\x00'}) 23:04:13 executing program 5: r0 = socket(0x25, 0x2, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:13 executing program 4: socket(0x1, 0x5, 0x6) socket$pptp(0x18, 0x1, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @private=0xa010102}}, 0x1e) 23:04:13 executing program 3: socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001600)=ANY=[], 0x4) 23:04:13 executing program 0: socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) 23:04:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x2, 0x3, 0x2}) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) syz_open_procfs$userns(r1, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x2, 0x3, 0x2}) (async) gettid() (async) syz_open_procfs$namespace(r1, 0x0) (async) syz_open_procfs$userns(r1, &(0x7f0000000080)) (async) 23:04:13 executing program 5: r0 = socket(0x25, 0x2, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x25, 0x2, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:04:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x3f, 0x9, 0x0, 0xc, @dev={0xfe, 0x80, '\x00', 0x40}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x1, 0x7ff, 0x1ff}}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250f000000050037000100000008003b000001000008000600", @ANYRES32=0x0, @ANYBLOB="08003c00a900000008003c000000008005002e000000000008000300", @ANYRES32=r1, @ANYBLOB="05002a00000000000a0009008fe34a915432000008000b0009000000"], 0x68}, 0x1, 0x0, 0x0, 0x4004091}, 0x40) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x9}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x200}}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x24, 0x0, 0x41, 0x3}, @typedef={0x10}, @enum={0xd, 0x8, 0x0, 0x6, 0x4, [{0xc, 0x2313698c}, {0xf, 0x3e6}, {0x6, 0xffff}, {0x5, 0x74}, {0x8}, {0x9}, {0x0, 0xffffffd8}, {0xf, 0x6}]}, @union={0xe, 0x1, 0x0, 0x5, 0x1, 0x274d, [{0x0, 0x3, 0x200}]}, @restrict={0x9, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000600)=""/90, 0xda, 0x5a, 0x1}, 0x20) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040002}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @sdr={0x34424752, 0x1}}) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000003c0)={0x7, @random="9bbe7e889abc"}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000006c0)={0x6, 0x1ff, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'bridge0\x00'}) 23:04:13 executing program 0: socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) 23:04:13 executing program 3: socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000001600)=ANY=[], 0x4) 23:04:13 executing program 5: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYBLOB="37bc9dc2e879801d5e971b83bcf698b808ecd926358e139cc6a7ee03"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r0 = socket(0x2, 0x6, 0x9) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:13 executing program 4: socket(0x1, 0x5, 0x6) socket$pptp(0x18, 0x1, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @private=0xa010102}}, 0x1e) socket(0x1, 0x5, 0x6) (async) socket$pptp(0x18, 0x1, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @private=0xa010102}}, 0x1e) (async) 23:04:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x4, 0x0, 0xfd}) syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x191081) 23:04:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x2, 0x3, 0x2}) (async) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) (async) syz_open_procfs$userns(r1, &(0x7f0000000080)) 23:04:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) recvfrom$rose(r3, &(0x7f0000000280)=""/173, 0xad, 0x20000010, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x20, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x1, 0x4, 0x1000, 0xc91, {0x0, 0xea60}, {0x2, 0x8, 0x40, 0x0, 0x5, 0x1, "3975ad10"}, 0xfffffffa, 0x1, {&(0x7f0000000140)=[{0x6, 0x3ff, {0x8000}, 0xc56}, {0x7f, 0x0, {0x5}, 0x9}]}}) 23:04:13 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 23:04:13 executing program 5: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYBLOB="37bc9dc2e879801d5e971b83bcf698b808ecd926358e139cc6a7ee03"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) (async) r0 = socket(0x2, 0x6, 0x9) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:13 executing program 4: socket(0x1, 0x5, 0x6) socket$pptp(0x18, 0x1, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @private=0xa010102}}, 0x1e) 23:04:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) recvfrom$rose(r3, &(0x7f0000000280)=""/173, 0xad, 0x20000010, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x20, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x1, 0x4, 0x1000, 0xc91, {0x0, 0xea60}, {0x2, 0x8, 0x40, 0x0, 0x5, 0x1, "3975ad10"}, 0xfffffffa, 0x1, {&(0x7f0000000140)=[{0x6, 0x3ff, {0x8000}, 0xc56}, {0x7f, 0x0, {0x5}, 0x9}]}}) 23:04:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x4, 0x0, 0xfd}) syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x191081) 23:04:13 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x2, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x30c2}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) 23:04:13 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 23:04:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0xc0800) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 23:04:13 executing program 5: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYBLOB="37bc9dc2e879801d5e971b83bcf698b808ecd926358e139cc6a7ee03"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r0 = socket(0x2, 0x6, 0x9) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) recvfrom$rose(r3, &(0x7f0000000280)=""/173, 0xad, 0x20000010, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x20, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_mmap={0x1000, 0x1, 0x4, 0x1000, 0xc91, {0x0, 0xea60}, {0x2, 0x8, 0x40, 0x0, 0x5, 0x1, "3975ad10"}, 0xfffffffa, 0x1, {&(0x7f0000000140)=[{0x6, 0x3ff, {0x8000}, 0xc56}, {0x7f, 0x0, {0x5}, 0x9}]}}) 23:04:13 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) 23:04:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x4, 0x0, 0xfd}) syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x191081) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x4, 0x0, 0xfd}) (async) syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x191081) (async) 23:04:13 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x2, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x30c2}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) 23:04:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0xc0800) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0xc0800) (async) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) (async) 23:04:13 executing program 3: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="4870b3e40461fe3ed9672fa55a880180ffff223663f5fbc4021e24f76ebb909279bf205a995187"], 0x4) 23:04:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) recvfrom$rose(r3, &(0x7f0000000280)=""/173, 0xad, 0x20000010, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x20, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 23:04:13 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x1f}) 23:04:13 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:04:13 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x2, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x30c2}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) socket(0x1d, 0x3, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x2, 0x9, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x30c2}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) (async) 23:04:13 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0xc0800) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0xc0800) (async) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) (async) 23:04:13 executing program 3: r0 = socket(0xf, 0x3, 0x2) recvfrom$rose(r0, &(0x7f0000000000)=""/50, 0x32, 0x2001, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) socket(0x1d, 0x3, 0x1) 23:04:13 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:04:13 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) recvfrom$rose(r3, &(0x7f0000000280)=""/173, 0xad, 0x20000010, 0x0, 0x0) 23:04:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x1f}) 23:04:14 executing program 4: socket(0xa, 0x809, 0x2000006) 23:04:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) recvfrom$rose(r3, &(0x7f0000000280)=""/173, 0xad, 0x20000010, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x20, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) 23:04:14 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) 23:04:14 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x4}) 23:04:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000100)) 23:04:14 executing program 4: socket(0xa, 0x809, 0x2000006) 23:04:14 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:04:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x1f}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x1f}) (async) 23:04:14 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r0 = socket(0x1d, 0x3, 0x5) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0xfffffffffffffffb, 0x20, 0x8}, 0x2f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) 23:04:14 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x4}) 23:04:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) syz_init_net_socket$rose(0xb, 0x5, 0x0) 23:04:14 executing program 4: socket(0xa, 0x809, 0x2000006) socket(0xa, 0x809, 0x2000006) (async) 23:04:14 executing program 3: r0 = socket(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x1, @remote, 'veth0_to_team\x00'}}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x823c}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 23:04:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x0, 0x8, 0x10, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7800, 0x1, 0x10000, 0x6}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000480)) 23:04:14 executing program 4: socket(0x18, 0xa, 0x80000005) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 23:04:14 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x5, 0x1, 0x4}) (async) [ 1340.406303] can: request_module (can-proto-5) failed. 23:04:14 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r0 = socket(0x1d, 0x3, 0x5) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0xfffffffffffffffb, 0x20, 0x8}, 0x2f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) (async) socket(0x1d, 0x3, 0x5) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0xfffffffffffffffb, 0x20, 0x8}, 0x2f) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) (async) 23:04:14 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:04:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x0, 0x8, 0x10, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7800, 0x1, 0x10000, 0x6}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x0, 0x8, 0x10, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7800, 0x1, 0x10000, 0x6}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:04:14 executing program 4: socket(0x18, 0xa, 0x80000005) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 23:04:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000500)={0x9, 0xaf38, 0x1, {0x2, @sliced={0x800, [0x52, 0x27ae, 0x1, 0xaf, 0x8, 0x0, 0x9, 0xfff, 0x0, 0x9, 0x6, 0x7f, 0x5, 0x401, 0x1000, 0x9, 0x400, 0x9, 0x9, 0x0, 0x1f, 0xff, 0x2, 0x8001, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3f, 0x7, 0x400, 0x2, 0x1000, 0x0, 0x5, 0x6, 0x78, 0x9c, 0x480, 0x81, 0x8, 0x9, 0x564, 0x4e8, 0x1, 0x7ff, 0xbde], 0x6}}, 0x10000}) 23:04:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@multiplanar_overlay={0x1, 0x1, 0x4, 0x1000, 0x9, {0x0, 0x2710}, {0x3, 0xc, 0x9, 0x4, 0x3f, 0xfb, "c61d6884"}, 0x5afb, 0x3, {&(0x7f0000000080)=[{0x200, 0xffffffff, {}, 0x8818}, {0x80000000, 0x8000, {0xff}, 0x1}]}, 0x81}) 23:04:14 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:04:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x0, 0x8, 0x10, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7800, 0x1, 0x10000, 0x6}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x0, 0x8, 0x10, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7800, 0x1, 0x10000, 0x6}}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:04:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) [ 1340.584122] can: request_module (can-proto-5) failed. 23:04:14 executing program 4: socket(0x18, 0xa, 0x80000005) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) 23:04:14 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1a}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:04:14 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r0 = socket(0x1d, 0x3, 0x5) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0xfffffffffffffffb, 0x20, 0x8}, 0x2f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) (async) socket(0x1d, 0x3, 0x5) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0xfffffffffffffffb, 0x20, 0x8}, 0x2f) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) (async) 23:04:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@multiplanar_overlay={0x1, 0x1, 0x4, 0x1000, 0x9, {0x0, 0x2710}, {0x3, 0xc, 0x9, 0x4, 0x3f, 0xfb, "c61d6884"}, 0x5afb, 0x3, {&(0x7f0000000080)=[{0x200, 0xffffffff, {}, 0x8818}, {0x80000000, 0x8000, {0xff}, 0x1}]}, 0x81}) [ 1340.628391] can: request_module (can-proto-5) failed. 23:04:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 23:04:14 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@multiplanar_overlay={0x1, 0x1, 0x4, 0x1000, 0x9, {0x0, 0x2710}, {0x3, 0xc, 0x9, 0x4, 0x3f, 0xfb, "c61d6884"}, 0x5afb, 0x3, {&(0x7f0000000080)=[{0x200, 0xffffffff, {}, 0x8818}, {0x80000000, 0x8000, {0xff}, 0x1}]}, 0x81}) 23:04:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) 23:04:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@multiplanar_overlay={0x1, 0x1, 0x4, 0x1000, 0x9, {0x0, 0x2710}, {0x3, 0xc, 0x9, 0x4, 0x3f, 0xfb, "c61d6884"}, 0x5afb, 0x3, {&(0x7f0000000080)=[{0x200, 0xffffffff, {}, 0x8818}, {0x80000000, 0x8000, {0xff}, 0x1}]}, 0x81}) 23:04:14 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 23:04:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) [ 1340.751208] can: request_module (can-proto-5) failed. 23:04:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) 23:04:14 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:04:14 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) [ 1340.798545] can: request_module (can-proto-5) failed. 23:04:14 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 23:04:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@overlay={0x0, 0x1, 0x4, 0x10, 0x2, {r2, r3/1000+60000}, {0x4, 0x2, 0x1, 0x3, 0x8, 0x0, "7c399cc2"}, 0x6, 0x3, {}, 0x20, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@fd={0xff, 0x1, 0x4, 0x2000, 0x40, {0x0, 0xea60}, {0x2, 0x1, 0xfd, 0x45, 0x9, 0x7, "9b5f1c24"}, 0xfffffc01, 0x4, {}, 0x0, 0x0, r4}) 23:04:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) 23:04:14 executing program 4: r0 = socket(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socket(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) 23:04:14 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) (rerun: 64) 23:04:14 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:04:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x2, 0x0, 0x3}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@overlay={0x100, 0x1, 0x4, 0x0, 0x0, {r2, r3/1000+10000}, {0x3, 0x1, 0x0, 0x0, 0x4, 0x5, "a8b29a7a"}, 0x1, 0x3, {}, 0xffffffff}) 23:04:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x804, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = socket(0x2b, 0x3, 0x2) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080}, 0x4000000) 23:04:14 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@overlay={0x0, 0x1, 0x4, 0x10, 0x2, {r2, r3/1000+60000}, {0x4, 0x2, 0x1, 0x3, 0x8, 0x0, "7c399cc2"}, 0x6, 0x3, {}, 0x20, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@fd={0xff, 0x1, 0x4, 0x2000, 0x40, {0x0, 0xea60}, {0x2, 0x1, 0xfd, 0x45, 0x9, 0x7, "9b5f1c24"}, 0xfffffc01, 0x4, {}, 0x0, 0x0, r4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) (async) clock_gettime(0x0, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@overlay={0x0, 0x1, 0x4, 0x10, 0x2, {r2, r3/1000+60000}, {0x4, 0x2, 0x1, 0x3, 0x8, 0x0, "7c399cc2"}, 0x6, 0x3, {}, 0x20}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@fd={0xff, 0x1, 0x4, 0x2000, 0x40, {0x0, 0xea60}, {0x2, 0x1, 0xfd, 0x45, 0x9, 0x7, "9b5f1c24"}, 0xfffffc01, 0x4, {}, 0x0, 0x0, r4}) (async) 23:04:14 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r1}, 0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r1, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r2) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 23:04:14 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) (rerun: 64) 23:04:14 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x804, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) r1 = socket(0x2b, 0x3, 0x2) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080}, 0x4000000) 23:04:14 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x2, 0x0, 0x3}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@overlay={0x100, 0x1, 0x4, 0x0, 0x0, {r2, r3/1000+10000}, {0x3, 0x1, 0x0, 0x0, 0x4, 0x5, "a8b29a7a"}, 0x1, 0x3, {}, 0xffffffff}) syz_open_dev$vim2m(&(0x7f0000000040), 0x1f, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x2, 0x0, 0x3}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@overlay={0x100, 0x1, 0x4, 0x0, 0x0, {r2, r3/1000+10000}, {0x3, 0x1, 0x0, 0x0, 0x4, 0x5, "a8b29a7a"}, 0x1, 0x3, {}, 0xffffffff}) (async) 23:04:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@overlay={0x0, 0x1, 0x4, 0x10, 0x2, {r2, r3/1000+60000}, {0x4, 0x2, 0x1, 0x3, 0x8, 0x0, "7c399cc2"}, 0x6, 0x3, {}, 0x20, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@fd={0xff, 0x1, 0x4, 0x2000, 0x40, {0x0, 0xea60}, {0x2, 0x1, 0xfd, 0x45, 0x9, 0x7, "9b5f1c24"}, 0xfffffc01, 0x4, {}, 0x0, 0x0, r4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$vim2m(&(0x7f00000000c0), 0x5, 0x2) (async) clock_gettime(0x0, &(0x7f0000000100)) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@overlay={0x0, 0x1, 0x4, 0x10, 0x2, {r2, r3/1000+60000}, {0x4, 0x2, 0x1, 0x3, 0x8, 0x0, "7c399cc2"}, 0x6, 0x3, {}, 0x20}) (async) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@fd={0xff, 0x1, 0x4, 0x2000, 0x40, {0x0, 0xea60}, {0x2, 0x1, 0xfd, 0x45, 0x9, 0x7, "9b5f1c24"}, 0xfffffc01, 0x4, {}, 0x0, 0x0, r4}) (async) 23:04:15 executing program 5: r0 = socket(0x9, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x804, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = socket(0x2b, 0x3, 0x2) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x804, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) socket(0x2b, 0x3, 0x2) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20080}, 0x4000000) (async) 23:04:15 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r0}, 0x14) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r0, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r1) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) 23:04:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x2, 0x0, 0x3}) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@overlay={0x100, 0x1, 0x4, 0x0, 0x0, {r2, r3/1000+10000}, {0x3, 0x1, 0x0, 0x0, 0x4, 0x5, "a8b29a7a"}, 0x1, 0x3, {}, 0xffffffff}) syz_open_dev$vim2m(&(0x7f0000000040), 0x1f, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x2, 0x0, 0x3}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)=@overlay={0x100, 0x1, 0x4, 0x0, 0x0, {r2, r3/1000+10000}, {0x3, 0x1, 0x0, 0x0, 0x4, 0x5, "a8b29a7a"}, 0x1, 0x3, {}, 0xffffffff}) (async) 23:04:15 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:15 executing program 5: r0 = socket(0x9, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:15 executing program 4: socket(0x26, 0x5, 0x1) r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0x800, 0x20, 0x31}, 0x2f) 23:04:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x1c7, 0x2, 0x4, 0xe000, 0x9, {}, {0x1, 0x8, 0x7f, 0x1, 0x81, 0x9, "670beb31"}, 0x0, 0x3, {&(0x7f0000000080)=[{0xd9d, 0xb39, {0x200}, 0x6ea}, {0xcc81, 0x4, {0x38a8}, 0xd99}]}, 0xd8}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:15 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40007fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x2, 0x0, 0xb}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000100)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x3, 0x0, 0x2}) 23:04:15 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r0}, 0x14) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r0, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r1) 23:04:15 executing program 5: r0 = socket(0x9, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x9, 0x3, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:04:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x1c7, 0x2, 0x4, 0xe000, 0x9, {}, {0x1, 0x8, 0x7f, 0x1, 0x81, 0x9, "670beb31"}, 0x0, 0x3, {&(0x7f0000000080)=[{0xd9d, 0xb39, {0x200}, 0x6ea}, {0xcc81, 0x4, {0x38a8}, 0xd99}]}, 0xd8}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:15 executing program 4: socket(0x26, 0x5, 0x1) (async) r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0x800, 0x20, 0x31}, 0x2f) 23:04:15 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40007fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x2, 0x0, 0xb}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000100)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x3, 0x0, 0x2}) syz_open_dev$vim2m(&(0x7f0000000000), 0x40007fffffff, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x2, 0x0, 0xb}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000100)=0x6) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x3, 0x0, 0x2}) (async) 23:04:15 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r0}, 0x14) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r0, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) 23:04:15 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x1c7, 0x2, 0x4, 0xe000, 0x9, {}, {0x1, 0x8, 0x7f, 0x1, 0x81, 0x9, "670beb31"}, 0x0, 0x3, {&(0x7f0000000080)=[{0xd9d, 0xb39, {0x200}, 0x6ea}, {0xcc81, 0x4, {0x38a8}, 0xd99}]}, 0xd8}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:15 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r0}, 0x14) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r0, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0xd03, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c010) 23:04:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x40007fffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x2, 0x0, 0xb}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000100)=0x6) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x3, 0x0, 0x2}) 23:04:15 executing program 4: socket(0x26, 0x5, 0x1) r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0x800, 0x20, 0x31}, 0x2f) socket(0x26, 0x5, 0x1) (async) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) (async) write$cgroup_pressure(r0, &(0x7f0000000040)={'some', 0x20, 0x800, 0x20, 0x31}, 0x2f) (async) 23:04:15 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004001}, 0x4c001) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)) r2 = socket(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000f20d31000003"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000380)={0x9, &(0x7f0000000300)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}]}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="d123c314ab78bdbbd7505154000100", @ANYRES16=r6, @ANYBLOB="000427bd7000fcdbdf250c00000008003c002a4b0000050035000000000008002b000800000008002b0009000000060028000400000008003c0003000000080039000300000008003a0009000000"], 0x54}, 0x1, 0x0, 0x0, 0x44040000}, 0x4000000) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000003c0)={r5, 0x16}) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x1, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x40}}, 0x40000) 23:04:15 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x3, @sdr={0x30324c4a, 0x3}}) 23:04:15 executing program 4: socket(0x2, 0x7, 0xdde5) 23:04:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7, 0x1, {0x1, @sliced={0x9, [0x0, 0x5, 0x69, 0x722, 0xff01, 0x1, 0x1e30, 0xff, 0xffff, 0x3, 0x200, 0x9, 0x401, 0xfc01, 0x3, 0x5, 0x4726, 0xffc0, 0x8, 0x4, 0x401, 0x3, 0x401, 0x8, 0x2, 0x400, 0x865, 0xfb, 0x3, 0x2, 0x27, 0x7, 0x0, 0x0, 0xf000, 0x2, 0x8, 0xff12, 0x40, 0xffff, 0x1, 0x37, 0x9, 0x7, 0x9, 0xc0, 0x1, 0x9]}}, 0x800}) 23:04:15 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r0}, 0x14) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r0, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) 23:04:15 executing program 0: r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004001}, 0x4c001) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)) (async, rerun: 64) r2 = socket(0x1d, 0x3, 0x1) (rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000f20d31000003"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async, rerun: 32) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000380)={0x9, &(0x7f0000000300)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}]}) (rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r4) (async, rerun: 32) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r7) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="d123c314ab78bdbbd7505154000100", @ANYRES16=r6, @ANYBLOB="000427bd7000fcdbdf250c00000008003c002a4b0000050035000000000008002b000800000008002b0009000000060028000400000008003c0003000000080039000300000008003a0009000000"], 0x54}, 0x1, 0x0, 0x0, 0x44040000}, 0x4000000) (async) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000003c0)={r5, 0x16}) (async) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x1, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x40}}, 0x40000) 23:04:15 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x3, @sdr={0x30324c4a, 0x3}}) 23:04:15 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r0}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r0, 0x29, 0x5, 0x40, 0x4, 0x12, @empty, @local, 0x10, 0x7, 0xffffffff, 0x4}}) 23:04:15 executing program 4: socket(0x2, 0x7, 0xdde5) 23:04:15 executing program 0: syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:15 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r0}, 0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 23:04:15 executing program 4: socket(0x2, 0x7, 0xdde5) 23:04:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004001}, 0x4c001) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)) r2 = socket(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000f20d31000003"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000380)={0x9, &(0x7f0000000300)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}]}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="d123c314ab78bdbbd7505154000100", @ANYRES16=r6, @ANYBLOB="000427bd7000fcdbdf250c00000008003c002a4b0000050035000000000008002b000800000008002b0009000000060028000400000008003c0003000000080039000300000008003a0009000000"], 0x54}, 0x1, 0x0, 0x0, 0x44040000}, 0x4000000) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000003c0)={r5, 0x16}) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x1, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x40}}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004001}, 0x4c001) (async) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)) (async) socket(0x1d, 0x3, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000f20d31000003"], 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000380)={0x9, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r7) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="d123c314ab78bdbbd7505154000100", @ANYRES16=r6, @ANYBLOB="000427bd7000fcdbdf250c00000008003c002a4b0000050035000000000008002b000800000008002b0009000000060028000400000008003c0003000000080039000300000008003a0009000000"], 0x54}, 0x1, 0x0, 0x0, 0x44040000}, 0x4000000) (async) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000003c0)={r5, 0x16}) (async) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x1, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x40}}, 0x40000) (async) 23:04:15 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x3, @sdr={0x30324c4a, 0x3}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000180)) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x3, @sdr={0x30324c4a, 0x3}}) (async) 23:04:16 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7, 0x1, {0x1, @sliced={0x9, [0x0, 0x5, 0x69, 0x722, 0xff01, 0x1, 0x1e30, 0xff, 0xffff, 0x3, 0x200, 0x9, 0x401, 0xfc01, 0x3, 0x5, 0x4726, 0xffc0, 0x8, 0x4, 0x401, 0x3, 0x401, 0x8, 0x2, 0x400, 0x865, 0xfb, 0x3, 0x2, 0x27, 0x7, 0x0, 0x0, 0xf000, 0x2, 0x8, 0xff12, 0x40, 0xffff, 0x1, 0x37, 0x9, 0x7, 0x9, 0xc0, 0x1, 0x9]}}, 0x800}) 23:04:16 executing program 4: r0 = socket(0x1d, 0x3, 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x20048017) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 23:04:16 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000800)={@rand_addr=' \x01\x00', r0}, 0x14) 23:04:16 executing program 5: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = socket(0x1d, 0x807, 0x9) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg1\x00'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0xbd, 0x0, &(0x7f0000000040)="98a15e6b3337ae1b5fa97682f9789d065d98f843035958b9489c0fd3b6a982f1283b48df46748feb5a246dec7244c85c46ae8ac399e2df695531f3273c6393649585995c44e3e548deee57364caf4f0b48abd888c499ea750b2c5cf00eeb03ea7cc537cc96e68b9470bb6a948b071fa4ae6b06d12a22108dfa55c90064a78b790ab66f10c370a239fb916e7afe48f9dc9cc8d102558338d4c942b381de1dec8ef2c1a7b4429e225adedd3ae02a615b838b1b669e9b4659be6091c9b15b"}) 23:04:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:16 executing program 0: syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:16 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x9, 0x7b, 0x26, @dev={0xfe, 0x80, '\x00', 0x43}, @mcast2, 0x7800, 0x1, 0x1ff, 0x2}}) 23:04:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:16 executing program 4: r0 = socket(0x1d, 0x3, 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x20048017) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 23:04:16 executing program 5: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = socket(0x1d, 0x807, 0x9) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg1\x00'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0xbd, 0x0, &(0x7f0000000040)="98a15e6b3337ae1b5fa97682f9789d065d98f843035958b9489c0fd3b6a982f1283b48df46748feb5a246dec7244c85c46ae8ac399e2df695531f3273c6393649585995c44e3e548deee57364caf4f0b48abd888c499ea750b2c5cf00eeb03ea7cc537cc96e68b9470bb6a948b071fa4ae6b06d12a22108dfa55c90064a78b790ab66f10c370a239fb916e7afe48f9dc9cc8d102558338d4c942b381de1dec8ef2c1a7b4429e225adedd3ae02a615b838b1b669e9b4659be6091c9b15b"}) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async) socket(0x1d, 0x807, 0x9) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg1\x00'}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0xbd, 0x0, &(0x7f0000000040)="98a15e6b3337ae1b5fa97682f9789d065d98f843035958b9489c0fd3b6a982f1283b48df46748feb5a246dec7244c85c46ae8ac399e2df695531f3273c6393649585995c44e3e548deee57364caf4f0b48abd888c499ea750b2c5cf00eeb03ea7cc537cc96e68b9470bb6a948b071fa4ae6b06d12a22108dfa55c90064a78b790ab66f10c370a239fb916e7afe48f9dc9cc8d102558338d4c942b381de1dec8ef2c1a7b4429e225adedd3ae02a615b838b1b669e9b4659be6091c9b15b"}) (async) 23:04:16 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) socket(0x1d, 0x3, 0x1) 23:04:16 executing program 4: r0 = socket(0x1d, 0x3, 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x20048017) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) socket(0x1d, 0x3, 0x1) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x20048017) (async) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x6}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) (async) 23:04:16 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7, 0x1, {0x1, @sliced={0x9, [0x0, 0x5, 0x69, 0x722, 0xff01, 0x1, 0x1e30, 0xff, 0xffff, 0x3, 0x200, 0x9, 0x401, 0xfc01, 0x3, 0x5, 0x4726, 0xffc0, 0x8, 0x4, 0x401, 0x3, 0x401, 0x8, 0x2, 0x400, 0x865, 0xfb, 0x3, 0x2, 0x27, 0x7, 0x0, 0x0, 0xf000, 0x2, 0x8, 0xff12, 0x40, 0xffff, 0x1, 0x37, 0x9, 0x7, 0x9, 0xc0, 0x1, 0x9]}}, 0x800}) 23:04:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) 23:04:16 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) 23:04:16 executing program 4: r0 = socket(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfc1}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 23:04:16 executing program 5: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) (async) r0 = socket(0x1d, 0x807, 0x9) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg1\x00'}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0xbd, 0x0, &(0x7f0000000040)="98a15e6b3337ae1b5fa97682f9789d065d98f843035958b9489c0fd3b6a982f1283b48df46748feb5a246dec7244c85c46ae8ac399e2df695531f3273c6393649585995c44e3e548deee57364caf4f0b48abd888c499ea750b2c5cf00eeb03ea7cc537cc96e68b9470bb6a948b071fa4ae6b06d12a22108dfa55c90064a78b790ab66f10c370a239fb916e7afe48f9dc9cc8d102558338d4c942b381de1dec8ef2c1a7b4429e225adedd3ae02a615b838b1b669e9b4659be6091c9b15b"}) 23:04:16 executing program 0: syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7fffffff, 0x3, 0x4, 0x20, 0x9, {0x0, 0x2710}, {0x1, 0x2, 0x7, 0x5, 0x2, 0x7f, "9269a5e1"}, 0x200, 0x2, {&(0x7f0000000040)}, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x0, 0x1}) 23:04:16 executing program 4: r0 = socket(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfc1}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) socket(0x1d, 0x3, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfc1}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) 23:04:16 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) 23:04:16 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 23:04:16 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7fffffff, 0x3, 0x4, 0x20, 0x9, {0x0, 0x2710}, {0x1, 0x2, 0x7, 0x5, 0x2, 0x7f, "9269a5e1"}, 0x200, 0x2, {&(0x7f0000000040)}, 0x5}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x0, 0x1}) 23:04:16 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 23:04:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000180)) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) 23:04:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 23:04:17 executing program 4: r0 = socket(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfc1}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 23:04:17 executing program 3: syz_open_dev$usbmon(0x0, 0x1000, 0x105b00) 23:04:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7fffffff, 0x3, 0x4, 0x20, 0x9, {0x0, 0x2710}, {0x1, 0x2, 0x7, 0x5, 0x2, 0x7f, "9269a5e1"}, 0x200, 0x2, {&(0x7f0000000040)}, 0x5}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x0, 0x1}) syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7fffffff, 0x3, 0x4, 0x20, 0x9, {0x0, 0x2710}, {0x1, 0x2, 0x7, 0x5, 0x2, 0x7f, "9269a5e1"}, 0x200, 0x2, {&(0x7f0000000040)}, 0x5}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x0, 0x1}) (async) 23:04:17 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 23:04:17 executing program 3: syz_open_dev$usbmon(0x0, 0x1000, 0x105b00) 23:04:17 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async, rerun: 64) connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 23:04:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 23:04:17 executing program 4: socket(0x2a, 0x3, 0x1) 23:04:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000180)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) 23:04:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20000000000c7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x88be, 0x1, 0x3, 0x0, 0x7}) 23:04:17 executing program 3: syz_open_dev$usbmon(0x0, 0x1000, 0x105b00) 23:04:17 executing program 5: ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x6) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x70882) socket(0x1d, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000040), &(0x7f0000000080)=""/41, 0x29}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x1f) 23:04:17 executing program 4: socket(0x2a, 0x3, 0x1) socket(0x2a, 0x3, 0x1) (async) 23:04:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20000000000c7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async, rerun: 32) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) (rerun: 32) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x88be, 0x1, 0x3, 0x0, 0x7}) 23:04:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x0, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x7) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) (async, rerun: 32) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000180)) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) 23:04:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x0, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:17 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x105b00) 23:04:17 executing program 5: ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x6) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x70882) (async) socket(0x1d, 0x3, 0x1) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000040), &(0x7f0000000080)=""/41, 0x29}) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x1f) 23:04:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x20000000000c7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) bind$rose(0xffffffffffffffff, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x88be, 0x1, 0x3, 0x0, 0x7}) 23:04:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) r1 = socket(0x1, 0x3, 0x5) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000002d80)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002d40)={&(0x7f0000001600)={0x38, 0x6, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) sendmsg$rds(r2, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/65, 0x41}], 0x4, &(0x7f00000033c0)=[@fadd={0x58, 0x114, 0x6, {{0x8, 0x3ff}, &(0x7f0000001440)=0xfffffffffffffffb, &(0x7f0000001480)=0xfffffffffffff800, 0x7, 0x1, 0x3, 0x3, 0x21, 0x1}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000014c0)=""/52, 0x34}, &(0x7f0000001500), 0x20}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0xb43}, &(0x7f0000001540)=0x10, &(0x7f0000001580)=0x8000, 0x9973, 0x6, 0x7fffffff, 0x46e, 0x41, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x3f, 0x6}, {&(0x7f0000003080)=""/197, 0xc5}, &(0x7f0000003380)=[{&(0x7f0000001780)=""/32, 0x20}, {&(0x7f0000001900)=""/119, 0x77}, {&(0x7f0000003180)=""/255, 0xff}, {&(0x7f0000003280)=""/229, 0xe5}], 0x4, 0x20, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001640)=""/86, 0x56}, &(0x7f00000016c0), 0x4}}, @fadd={0x58, 0x114, 0x6, {{0xc, 0x6c}, &(0x7f0000001700)=0x3, &(0x7f0000001740)=0x1d, 0x7ff, 0x6, 0x6, 0x100000000000002, 0x50, 0x100000001}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000003680)=""/102400, 0x19000}, &(0x7f00000017c0), 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0x80}, {&(0x7f0000001800)=""/62, 0x3e}, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/150, 0x96}, {&(0x7f0000003000)=""/128, 0x80}, {&(0x7f0000001980)=""/112, 0x70}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/147, 0x93}, {&(0x7f0000002ac0)=""/117, 0x75}, {&(0x7f0000002b40)=""/11, 0xb}, {&(0x7f0000002b80)=""/148, 0x94}], 0x8, 0x4, 0xfffffffffffffffc}}, @fadd={0x58, 0x114, 0x6, {{0x2, 0xdecd}, &(0x7f0000002cc0)=0x9, &(0x7f0000002d00)=0x200000000000005, 0x9, 0x78d5bc45, 0x3, 0x4, 0x0, 0x5}}], 0x298, 0x4004000}, 0x40090) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000001c0)) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140)={0x8000000000000001, 0x20, 0x0, 0x20, 0xffff}, 0x48) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:17 executing program 4: socket(0x2a, 0x3, 0x1) socket(0x2a, 0x3, 0x1) (async) 23:04:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x0, @pix={0xd6, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:17 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x105b00) 23:04:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@mmap={0x3e2, 0x0, 0x4, 0x204, 0x17ca6b4c, {}, {0x2, 0xc, 0x9, 0x1f, 0x3, 0x81, "41d9e4cd"}, 0x81, 0x1, {}, 0x8}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) (async) r1 = socket(0x1, 0x3, 0x5) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000002d80)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002d40)={&(0x7f0000001600)={0x38, 0x6, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) sendmsg$rds(r2, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/65, 0x41}], 0x4, &(0x7f00000033c0)=[@fadd={0x58, 0x114, 0x6, {{0x8, 0x3ff}, &(0x7f0000001440)=0xfffffffffffffffb, &(0x7f0000001480)=0xfffffffffffff800, 0x7, 0x1, 0x3, 0x3, 0x21, 0x1}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000014c0)=""/52, 0x34}, &(0x7f0000001500), 0x20}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0xb43}, &(0x7f0000001540)=0x10, &(0x7f0000001580)=0x8000, 0x9973, 0x6, 0x7fffffff, 0x46e, 0x41, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x3f, 0x6}, {&(0x7f0000003080)=""/197, 0xc5}, &(0x7f0000003380)=[{&(0x7f0000001780)=""/32, 0x20}, {&(0x7f0000001900)=""/119, 0x77}, {&(0x7f0000003180)=""/255, 0xff}, {&(0x7f0000003280)=""/229, 0xe5}], 0x4, 0x20, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001640)=""/86, 0x56}, &(0x7f00000016c0), 0x4}}, @fadd={0x58, 0x114, 0x6, {{0xc, 0x6c}, &(0x7f0000001700)=0x3, &(0x7f0000001740)=0x1d, 0x7ff, 0x6, 0x6, 0x100000000000002, 0x50, 0x100000001}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000003680)=""/102400, 0x19000}, &(0x7f00000017c0), 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0x80}, {&(0x7f0000001800)=""/62, 0x3e}, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/150, 0x96}, {&(0x7f0000003000)=""/128, 0x80}, {&(0x7f0000001980)=""/112, 0x70}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/147, 0x93}, {&(0x7f0000002ac0)=""/117, 0x75}, {&(0x7f0000002b40)=""/11, 0xb}, {&(0x7f0000002b80)=""/148, 0x94}], 0x8, 0x4, 0xfffffffffffffffc}}, @fadd={0x58, 0x114, 0x6, {{0x2, 0xdecd}, &(0x7f0000002cc0)=0x9, &(0x7f0000002d00)=0x200000000000005, 0x9, 0x78d5bc45, 0x3, 0x4, 0x0, 0x5}}], 0x298, 0x4004000}, 0x40090) (async, rerun: 64) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000001c0)) (async, rerun: 64) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140)={0x8000000000000001, 0x20, 0x0, 0x20, 0xffff}, 0x48) (async) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x7, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x80, 0x7, 0x10001, 0x6}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYBLOB="2e03340aab297f1b6af8c265b53ca35d2d94fe45c51376906632cf1be259471e20b855f2e3ae1e4b4ccd558b4bfb47cbed564e17952f1b62133bbe58c17a1433e4bafd13777f509c086b130ff9683ae30254be5c6dc5d8238a082a926a0d6be4d4154ee8a40244869aad08f52b2e0a4f9a279c6abedba673dd6ed8e6596b523e74347ce916b7c54d69dca6ec9aba6899", @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20004040}, 0x44010) socket(0x1e, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) getsockopt$rose(r1, 0x104, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 23:04:17 executing program 5: ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x6) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x70882) socket(0x1d, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000040), &(0x7f0000000080)=""/41, 0x29}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x1f) ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x6) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x8, 0x70882) (async) socket(0x1d, 0x3, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000040), &(0x7f0000000080)=""/41, 0x29}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x1f) (async) 23:04:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0xf2, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:17 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x105b00) 23:04:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@mmap={0x3e2, 0x0, 0x4, 0x204, 0x17ca6b4c, {}, {0x2, 0xc, 0x9, 0x1f, 0x3, 0x81, "41d9e4cd"}, 0x81, 0x1, {}, 0x8}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (rerun: 64) 23:04:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) (async) r1 = socket(0x1, 0x3, 0x5) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000002d80)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002d40)={&(0x7f0000001600)={0x38, 0x6, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000000c0)) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) sendmsg$rds(r2, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/65, 0x41}], 0x4, &(0x7f00000033c0)=[@fadd={0x58, 0x114, 0x6, {{0x8, 0x3ff}, &(0x7f0000001440)=0xfffffffffffffffb, &(0x7f0000001480)=0xfffffffffffff800, 0x7, 0x1, 0x3, 0x3, 0x21, 0x1}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000014c0)=""/52, 0x34}, &(0x7f0000001500), 0x20}}, @fadd={0x58, 0x114, 0x6, {{0x7, 0xb43}, &(0x7f0000001540)=0x10, &(0x7f0000001580)=0x8000, 0x9973, 0x6, 0x7fffffff, 0x46e, 0x41, 0x9}}, @rdma_args={0x48, 0x114, 0x1, {{0x3f, 0x6}, {&(0x7f0000003080)=""/197, 0xc5}, &(0x7f0000003380)=[{&(0x7f0000001780)=""/32, 0x20}, {&(0x7f0000001900)=""/119, 0x77}, {&(0x7f0000003180)=""/255, 0xff}, {&(0x7f0000003280)=""/229, 0xe5}], 0x4, 0x20, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001640)=""/86, 0x56}, &(0x7f00000016c0), 0x4}}, @fadd={0x58, 0x114, 0x6, {{0xc, 0x6c}, &(0x7f0000001700)=0x3, &(0x7f0000001740)=0x1d, 0x7ff, 0x6, 0x6, 0x100000000000002, 0x50, 0x100000001}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000003680)=""/102400, 0x19000}, &(0x7f00000017c0), 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0x80}, {&(0x7f0000001800)=""/62, 0x3e}, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/150, 0x96}, {&(0x7f0000003000)=""/128, 0x80}, {&(0x7f0000001980)=""/112, 0x70}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/147, 0x93}, {&(0x7f0000002ac0)=""/117, 0x75}, {&(0x7f0000002b40)=""/11, 0xb}, {&(0x7f0000002b80)=""/148, 0x94}], 0x8, 0x4, 0xfffffffffffffffc}}, @fadd={0x58, 0x114, 0x6, {{0x2, 0xdecd}, &(0x7f0000002cc0)=0x9, &(0x7f0000002d00)=0x200000000000005, 0x9, 0x78d5bc45, 0x3, 0x4, 0x0, 0x5}}], 0x298, 0x4004000}, 0x40090) (async) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000001c0)) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000140)={0x8000000000000001, 0x20, 0x0, 0x20, 0xffff}, 0x48) ioctl$MON_IOCQ_RING_SIZE(r2, 0x9205) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x44495658, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x7, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x80, 0x7, 0x10001, 0x6}}) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYBLOB="2e03340aab297f1b6af8c265b53ca35d2d94fe45c51376906632cf1be259471e20b855f2e3ae1e4b4ccd558b4bfb47cbed564e17952f1b62133bbe58c17a1433e4bafd13777f509c086b130ff9683ae30254be5c6dc5d8238a082a926a0d6be4d4154ee8a40244869aad08f52b2e0a4f9a279c6abedba673dd6ed8e6596b523e74347ce916b7c54d69dca6ec9aba6899", @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20004040}, 0x44010) (async) socket(0x1e, 0x3, 0x1) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) getsockopt$rose(r1, 0x104, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 23:04:17 executing program 5: socket(0x18, 0x4, 0x4d2c) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:17 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x0) 23:04:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)=@mmap={0x3e2, 0x0, 0x4, 0x204, 0x17ca6b4c, {}, {0x2, 0xc, 0x9, 0x1f, 0x3, 0x81, "41d9e4cd"}, 0x81, 0x1, {}, 0x8}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) 23:04:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x3f, 0x7, 0x2, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x80, 0x7, 0x10001, 0x6}}) (async, rerun: 64) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYBLOB="2e03340aab297f1b6af8c265b53ca35d2d94fe45c51376906632cf1be259471e20b855f2e3ae1e4b4ccd558b4bfb47cbed564e17952f1b62133bbe58c17a1433e4bafd13777f509c086b130ff9683ae30254be5c6dc5d8238a082a926a0d6be4d4154ee8a40244869aad08f52b2e0a4f9a279c6abedba673dd6ed8e6596b523e74347ce916b7c54d69dca6ec9aba6899", @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20004040}, 0x44010) (async, rerun: 64) socket(0x1e, 0x3, 0x1) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) getsockopt$rose(r1, 0x104, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async, rerun: 32) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 32) 23:04:17 executing program 5: socket(0x18, 0x4, 0x4d2c) socket$rds(0x15, 0x5, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x18, 0x4, 0x4d2c) (async) socket$rds(0x15, 0x5, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:04:17 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x0) 23:04:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) (async) 23:04:17 executing program 5: socket(0x18, 0x4, 0x4d2c) (async) socket$rds(0x15, 0x5, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:17 executing program 4: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) 23:04:17 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @win={{0x3, 0x7fff, 0x1, 0x7fffffff}, 0x0, 0x1, &(0x7f00000001c0)={{0x9, 0x9, 0x4, 0x3bd707b1}, &(0x7f0000000180)={{0x3, 0xe, 0x9, 0x8}}}, 0x7ff, &(0x7f0000000200)="272e4401af8a78d0fab19e543eb1b2072a49063ec1d798c06d5e232b65354477b38667723f2c719e812fb40ed00958024d76390511ffe2cbee46eb049f38f025658a3314c8044c6749"}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r1) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}}, 0x8000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80080}, 0x2404c804) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10001100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r8, 0x321, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x20000004) 23:04:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) syz_open_procfs$userns(0x0, &(0x7f00000000c0)) 23:04:17 executing program 3: syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x0) 23:04:17 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:18 executing program 4: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) 23:04:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async, rerun: 64) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @win={{0x3, 0x7fff, 0x1, 0x7fffffff}, 0x0, 0x1, &(0x7f00000001c0)={{0x9, 0x9, 0x4, 0x3bd707b1}, &(0x7f0000000180)={{0x3, 0xe, 0x9, 0x8}}}, 0x7ff, &(0x7f0000000200)="272e4401af8a78d0fab19e543eb1b2072a49063ec1d798c06d5e232b65354477b38667723f2c719e812fb40ed00958024d76390511ffe2cbee46eb049f38f025658a3314c8044c6749"}}) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r1) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}}, 0x8000) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r7) (async, rerun: 32) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80080}, 0x2404c804) (rerun: 32) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10001100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r8, 0x321, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x20000004) 23:04:18 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 23:04:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x9, 0x7fff, 0x2, {0x0, @pix_mp={0x80, 0x7, 0x20323159, 0x1, 0x8, [{0x401}, {0x2}, {0xff, 0x2}, {0x7, 0x5}, {0x3, 0x10001}, {0x6, 0x1}, {0x7, 0xff}, {0x1, 0x4}], 0x9, 0x0, 0x2, 0x2, 0x2}}, 0x800}) 23:04:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:18 executing program 4: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) 23:04:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @win={{0x3, 0x7fff, 0x1, 0x7fffffff}, 0x0, 0x1, &(0x7f00000001c0)={{0x9, 0x9, 0x4, 0x3bd707b1}, &(0x7f0000000180)={{0x3, 0xe, 0x9, 0x8}}}, 0x7ff, &(0x7f0000000200)="272e4401af8a78d0fab19e543eb1b2072a49063ec1d798c06d5e232b65354477b38667723f2c719e812fb40ed00958024d76390511ffe2cbee46eb049f38f025658a3314c8044c6749"}}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) (async) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r1) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r6, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x3c}}, 0x8000) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r7) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80080}, 0x2404c804) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10001100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r8, 0x321, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x20000004) 23:04:18 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) 23:04:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:18 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x1000, 0x105b00) socket(0x1d, 0x3, 0x1) 23:04:18 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0x1d, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x4, 0x0, 0x20}) 23:04:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x9, 0x7fff, 0x2, {0x0, @pix_mp={0x80, 0x7, 0x20323159, 0x1, 0x8, [{0x401}, {0x2}, {0xff, 0x2}, {0x7, 0x5}, {0x3, 0x10001}, {0x6, 0x1}, {0x7, 0xff}, {0x1, 0x4}], 0x9, 0x0, 0x2, 0x2, 0x2}}, 0x800}) 23:04:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0xa800) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xb0, 0x1, 0x4}) 23:04:18 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 23:04:18 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0x1d, 0x3, 0x1) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x4, 0x0, 0x20}) 23:04:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7, 0x1, {0x1, @sliced={0x9, [0x0, 0x5, 0x69, 0x722, 0xff01, 0x1, 0x1e30, 0xff, 0xffff, 0x3, 0x200, 0x9, 0x401, 0xfc01, 0x3, 0x5, 0x4726, 0xffc0, 0x8, 0x4, 0x401, 0x3, 0x401, 0x8, 0x2, 0x400, 0x865, 0xfb, 0x3, 0x2, 0x27, 0x7, 0x0, 0x0, 0xf000, 0x2, 0x8, 0xff12, 0x40, 0xffff, 0x1, 0x37, 0x9, 0x7, 0x9, 0xc0, 0x1, 0x9]}}, 0x800}) 23:04:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x2, 0x2}}) 23:04:18 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x9, 0x7fff, 0x2, {0x0, @pix_mp={0x80, 0x7, 0x20323159, 0x1, 0x8, [{0x401}, {0x2}, {0xff, 0x2}, {0x7, 0x5}, {0x3, 0x10001}, {0x6, 0x1}, {0x7, 0xff}, {0x1, 0x4}], 0x9, 0x0, 0x2, 0x2, 0x2}}, 0x800}) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000000c0)={0x9, 0x7fff, 0x2, {0x0, @pix_mp={0x80, 0x7, 0x20323159, 0x1, 0x8, [{0x401}, {0x2}, {0xff, 0x2}, {0x7, 0x5}, {0x3, 0x10001}, {0x6, 0x1}, {0x7, 0xff}, {0x1, 0x4}], 0x9, 0x0, 0x2, 0x2, 0x2}}, 0x800}) (async) 23:04:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0xa800) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000000c0)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xb0, 0x1, 0x4}) 23:04:18 executing program 5: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x7, 0x9, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x10, 0x7a, 0x17}}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:18 executing program 5: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x7, 0x9, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x10, 0x7a, 0x17}}) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:18 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket(0x1d, 0x3, 0x1) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x4, 0x0, 0x20}) 23:04:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async, rerun: 32) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async, rerun: 32) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0xa800) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f00000000c0)) (async, rerun: 32) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0xb0, 0x1, 0x4}) (rerun: 32) 23:04:18 executing program 5: r0 = socket(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x7, 0x9, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x10, 0x7a, 0x17}}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x1d, 0x3, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x80, 0x7, 0x9, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x10, 0x7a, 0x17}}) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:04:18 executing program 4: r0 = socket(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x40) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @multicast}]}) 23:04:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x9, 0x1, 0x4}) 23:04:18 executing program 4: r0 = socket(0x1d, 0x3, 0x1) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x40) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @multicast}]}) 23:04:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7, 0x1, {0x1, @sliced={0x9, [0x0, 0x5, 0x69, 0x722, 0xff01, 0x1, 0x1e30, 0xff, 0xffff, 0x3, 0x200, 0x9, 0x401, 0xfc01, 0x3, 0x5, 0x4726, 0xffc0, 0x8, 0x4, 0x401, 0x3, 0x401, 0x8, 0x2, 0x400, 0x865, 0xfb, 0x3, 0x2, 0x27, 0x7, 0x0, 0x0, 0xf000, 0x2, 0x8, 0xff12, 0x40, 0xffff, 0x1, 0x37, 0x9, 0x7, 0x9, 0xc0, 0x1, 0x9]}}, 0x800}) 23:04:18 executing program 5: r0 = socket(0xa, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:18 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) write$6lowpan_control(r0, &(0x7f0000000240)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000100)=""/240}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x5, 0x0, 0x4, 0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) 23:04:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x9, 0x1, 0x4}) 23:04:18 executing program 4: r0 = socket(0x1d, 0x3, 0x1) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x40) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @multicast}]}) 23:04:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x3, 0x2, 0x2}}) 23:04:18 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x9, 0x1, 0x4}) 23:04:18 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x2}}) 23:04:18 executing program 5: r0 = socket(0xa, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:18 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) write$6lowpan_control(r0, &(0x7f0000000240)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000100)=""/240}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x5, 0x0, 0x4, 0x0, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) write$6lowpan_control(r0, &(0x7f0000000240)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000100)=""/240}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x5, 0x0, 0x4, 0x0, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) (async) 23:04:19 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r0 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x1de602) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:19 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 'macvtap0\x00'}}) 23:04:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7, 0x1, {0x1, @sliced={0x9, [0x0, 0x5, 0x69, 0x722, 0xff01, 0x1, 0x1e30, 0xff, 0xffff, 0x3, 0x200, 0x9, 0x401, 0xfc01, 0x3, 0x5, 0x4726, 0xffc0, 0x8, 0x4, 0x401, 0x3, 0x401, 0x8, 0x2, 0x400, 0x865, 0xfb, 0x3, 0x2, 0x27, 0x7, 0x0, 0x0, 0xf000, 0x2, 0x8, 0xff12, 0x40, 0xffff, 0x1, 0x37, 0x9, 0x7, 0x9, 0xc0, 0x1, 0x9]}}, 0x800}) 23:04:19 executing program 5: r0 = socket(0xa, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0xa, 0x3, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r1) (async) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:04:19 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) r0 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x1de602) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:19 executing program 4: socket(0x1d, 0x3, 0x1) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 'macvtap0\x00'}}) 23:04:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x2}}) 23:04:19 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) (async) write$6lowpan_control(r0, &(0x7f0000000240)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000200)={0x0, &(0x7f0000000100)=""/240}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x5, 0x0, 0x4, 0x0, 0x4}) (async, rerun: 64) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x2}) 23:04:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2}}) 23:04:19 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:19 executing program 2: syz_open_dev$vim2m(&(0x7f0000000000), 0x20000000000cb, 0x2) (async) r0 = syz_open_dev$audion(&(0x7f0000000080), 0x8, 0x1de602) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) 23:04:19 executing program 4: socket(0x1d, 0x3, 0x1) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 'macvtap0\x00'}}) socket(0x1d, 0x3, 0x1) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 'macvtap0\x00'}}) (async) 23:04:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x40) 23:04:19 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) 23:04:19 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x7, 0x1, {0x1, @sliced={0x9, [0x0, 0x5, 0x69, 0x722, 0xff01, 0x1, 0x1e30, 0xff, 0xffff, 0x3, 0x200, 0x9, 0x401, 0xfc01, 0x3, 0x5, 0x4726, 0xffc0, 0x8, 0x4, 0x401, 0x3, 0x401, 0x8, 0x2, 0x400, 0x865, 0xfb, 0x3, 0x2, 0x27, 0x7, 0x0, 0x0, 0xf000, 0x2, 0x8, 0xff12, 0x40, 0xffff, 0x1, 0x37, 0x9, 0x7, 0x9, 0xc0, 0x1, 0x9]}}, 0x800}) 23:04:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x3, 0x3, 0x2, 0x0, 0x3}) 23:04:19 executing program 4: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x5) socket(0x1d, 0x2, 0x1) 23:04:19 executing program 5: r0 = socket(0x1d, 0x3, 0x1) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) socket(0x1d, 0x3, 0x1) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) 23:04:19 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2}}) 23:04:19 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x5, 0x1, 0x4}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0xd, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x40) 23:04:19 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x3, 0x3, 0x2, 0x0, 0x3}) 23:04:20 executing program 4: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x5) (async) socket(0x1d, 0x2, 0x1) 23:04:20 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x121800) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000d00)={0x444, r1, 0x5e23d963aaae5314, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x420, 0x8, 0x0, 0x1, [{0x3f8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @private1, 0x1f}}, @WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x154, 0x9, 0x0, 0x1, [{0x4}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0xfe}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9d6ef9959ece3445d0d7d3073f5ac54779f40a2260b7bee96ecd0ef7f910b4db"}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x444}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{}, {0x0, 0x0, 0x0, @broadcast}]}) 23:04:20 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000000cb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x1, 0x4}) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x3, 0x3, 0x2, 0x0, 0x3}) 23:04:20 executing program 4: ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x5) (async) socket(0x1d, 0x2, 0x1) 23:04:20 executing program 5: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x121800) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000d00)={0x444, r1, 0x5e23d963aaae5314, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x420, 0x8, 0x0, 0x1, [{0x3f8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @private1, 0x1f}}, @WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x154, 0x9, 0x0, 0x1, [{0x4}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0xfe}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9d6ef9959ece3445d0d7d3073f5ac54779f40a2260b7bee96ecd0ef7f910b4db"}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x444}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{}, {0x0, 0x0, 0x0, @broadcast}]}) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x121800) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000d00)={0x444, r1, 0x5e23d963aaae5314, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x420, 0x8, 0x0, 0x1, [{0x3f8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @private1, 0x1f}}, @WGPEER_A_ALLOWEDIPS={0x198, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x154, 0x9, 0x0, 0x1, [{0x4}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0xfe}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9d6ef9959ece3445d0d7d3073f5ac54779f40a2260b7bee96ecd0ef7f910b4db"}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x444}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r2) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{}, {0x0, 0x0, 0x0, @broadcast}]}) (async) [ 1346.466350] ------------[ cut here ]------------ [ 1346.471369] WARNING: CPU: 0 PID: 22361 at drivers/dma-buf/dma-buf.c:1039 dma_buf_vunmap+0x181/0x1f0 [ 1346.480715] Kernel panic - not syncing: panic_on_warn set ... [ 1346.480715] [ 1346.488056] CPU: 0 PID: 22361 Comm: syz-executor.3 Not tainted 4.14.281-syzkaller #0 [ 1346.495916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.505253] Call Trace: [ 1346.507823] dump_stack+0x1b2/0x281 [ 1346.511450] panic+0x1f9/0x42d [ 1346.514627] ? add_taint.cold+0x16/0x16 [ 1346.518584] ? dma_buf_vunmap+0x181/0x1f0 [ 1346.522709] ? dma_buf_vunmap+0x181/0x1f0 [ 1346.526835] __warn.cold+0x20/0x44 [ 1346.530353] ? ist_end_non_atomic+0x10/0x10 [ 1346.534656] ? dma_buf_vunmap+0x181/0x1f0 [ 1346.538873] report_bug+0x208/0x250 [ 1346.542491] do_error_trap+0x195/0x2d0 [ 1346.546354] ? math_error+0x2d0/0x2d0 [ 1346.550133] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1346.556259] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1346.561087] invalid_op+0x1b/0x40 [ 1346.564516] RIP: 0010:dma_buf_vunmap+0x181/0x1f0 [ 1346.569247] RSP: 0018:ffff88807a8ffc80 EFLAGS: 00010297 [ 1346.574589] RAX: ffff888086774100 RBX: 0000000000000000 RCX: 0000000000000000 [ 1346.581841] RDX: 0000000000000000 RSI: ffffc9000b048000 RDI: 0000000000000000 [ 1346.589086] RBP: ffffc9000b048000 R08: 0000000000000000 R09: 0000000000040552 [ 1346.596337] R10: ffff8880867749b0 R11: ffff888086774100 R12: ffffc9000b048000 [ 1346.603586] R13: ffff8880aacbdaa8 R14: ffff88809c672080 R15: 0000000000000000 [ 1346.610846] vb2_vmalloc_detach_dmabuf+0x57/0x80 [ 1346.615586] ? vb2_vmalloc_map_dmabuf+0x90/0x90 [ 1346.620236] __vb2_plane_dmabuf_put+0x10b/0x2e0 [ 1346.624886] __vb2_queue_free+0x5e4/0x7a0 [ 1346.629013] vb2_core_queue_release+0x5b/0x70 [ 1346.633489] _vb2_fop_release+0x1c1/0x280 [ 1346.637620] ? _vb2_fop_release+0x280/0x280 [ 1346.641936] ? dev_debug_store+0xe0/0xe0 [ 1346.645981] v4l2_release+0xf4/0x190 [ 1346.649672] __fput+0x25f/0x7a0 [ 1346.652931] task_work_run+0x11f/0x190 [ 1346.656808] exit_to_usermode_loop+0x1ad/0x200 [ 1346.661379] do_syscall_64+0x4a3/0x640 [ 1346.665261] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1346.670425] RIP: 0033:0x7fda95d8ed4b [ 1346.674116] RSP: 002b:00007ffcaa796340 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1346.681807] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fda95d8ed4b [ 1346.689050] RDX: 0000000000000000 RSI: 0000001b30521128 RDI: 0000000000000003 [ 1346.696300] RBP: 00007fda95ef0960 R08: 0000000000000000 R09: 000000003be56d75 [ 1346.703810] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000148e23 [ 1346.711056] R13: 00007ffcaa796440 R14: 00007ffcaa796460 R15: 0000000000000032 [ 1346.718620] Kernel Offset: disabled [ 1346.722320] Rebooting in 86400 seconds..